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Introduction 


Scripting and command line guide overview 


HPE iLO 5 provides multiple ways to configure, update, and operate HPE ProLiant servers remotely. The HPE iLO User 
Guide describes each feature and explains how to use these features with the browser-based interface and RBSU. For 
more information, see the iLO User Guide on the Hewlett Packard Enterprise website at http://www.hpe.com/info/ilo/ 
docs. 


The HPE iLO Scripting and Command Line Guide describes the syntax and tools available to use iLO 5 through a 
command line or scripted interface. 


Sample XML scripts downloaded from the Hewlett Packard Enterprise website contain commands for all iLO firmware. 
Unless otherwise specified, the examples in this guide are for iLO 5 version 1.10 and later. Before using the sample 
scripts, review the firmware support information in each script to tailor the script for the intended firmware and version. 
Download the sample scripts from the Hewlett Packard Enterprise website: 


e Windows: 


http://www.hpe.com/support/windows-sample-scripts 


e Linux 


http://www.hpe.com/support/linux-perl-sample-scripts 


Throughout this manual, iLO 5 is referred to as iLO. 


In addition to the GUI, the iLO firmware provides multiple ways to configure and control iLO and the server using scripts 
and command line instructions. 


The scripting tools provide a method to configure multiple iLO systems, to incorporate a standard configuration into the 
deployment process, and to control servers and subsystems. Using the scripting tools enables you to: 


e Change the Administrator password on all your iLO systems 
e Configure LDAP directory service settings 

e Control the server power state 

e Attach a virtual media CD/DVD to the host server 

e Update the iLO firmware 

e Retrieve power consumption data 


e Issue various configuration and control commands 


The command line tools provide quick and easy methods to send commands to the iLO firmware and host servers. 


NOTE: The iLO scripting and the CLI have supported all the new features of past generations of HPE servers and earlier 
revisions of iLO. With the release of iLO 5, some new features and capabilities available in the iLO web interface are not 
supported by RIBCL or the CLI. Instead, HPE recommends the use of the iLO RESTful API, particularly for setting the new 
iLO security states and extended user privileges. The iLO RESTful АРІ is the preferred programmatic interface for Gen10 
and later systems, and the preferred CLI/scripting tool is the RESTful Interface Tool CiLOrest). 


For more information about the iLO RESTful API ecosystem, see http://www.hpe.com/info/redfish. 
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Scripting and command line utilities 
This section describes the following scripting and command line tools: 


e HPQLOCFG.EXE 


e LOCFG.PL 

e HPONCFG.EXE 
e SMASH CLP 

e ІРМІ 


The current version of iLO 5 requires the following versions of the utilities: 


Table 1: HPE iLO 5 1.10 scripting and command line utilities required versions 


Utility Version 
————————————————————————————————— más] 
HPQLOCFG 5.0.0 

HP Lights-Out XML Scripting Sample 5.00 

HPONCFG for Windows 5.0.0.0 

HPONCFG for Linux 5.0.0-0 

LOCFG.PL* 5.00 

HPLOMIG 5.00 


1 This utility is available in the HP Lights-Out XML Scripting Sample. 


HPQLOCFG Utility 


The Lights-Out Configuration Utility CHPQLOCFG.EXE) utility is a Windows command line utility that sends XML 
configuration and control scripts over the network to iLO. Run this utility manually from a Windows command prompt, or 
create a batch file to run the same script to many iLO devices. 


The tool accepts properly formatted XML scripts containing commands and values; see the XML scripts in the iLO Sample 
Scripts for Windows or the HP Lights-Out XML Scripting Sample for Linux for examples of proper formatting. All available 
commands are detailed later in this guide. HPQLOCFG also integrates with HPE SIM for easy launching of the same script 
on multiple devices. 


LOCFG.PL Script 


The LOCFG.PL scripting utility is a PERL script that provides similar functionality as the HPQLOCFG utility. Run this tool 
on any client that has a compatible PERL environment Cincluding OpenSSL) installed. This tool uses the same XML scripts 
as HPQLOCFG input files. 


HPONCFG Utility 


Use the HPONCFG.EXE utility to send XML configuration and control scripts (the same scripts as HPQLOCFG) from the 
server host operating system to iLO. HPONCFG has both Windows and Linux versions. One common usage is to run an 
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HPONCFG script to configure iLO to a standard configuration at the end of your server deployment process. HPONCFG 
integrates with HPE RDP and also runs at the end of an unattended OS installation. 


NOTE: HPONCFG on Linux supports iLO higher security states. HPONCFG on Windows supports Production mode only. 


When you run HPONCFG from the host operating system, you must be logged in to the host server using an 
Administrator or root level user account. An iLO username and password are not required (when iLO security is set to 
Production). However, when using Linux with iLO security set to any state higher than Production, a username and 
password are required. 


Windows server operating systems also have the HPONCFG, GUI.EXE utility. As with the command line HPONCFG, this 
utility supports iLO 5 only in Production mode. 


SMASH CLP 


IPMI 


SMASH CLP is the DMTF suite of specifications that deliver industry-standard protocols and profiles to unify the 
management of the data center. The SMASH CLP specification enables simple and intuitive management of 
heterogeneous servers in a data center. 


SMASH CLP provides a standardized set of commands for configuration and control of management processors (called 
Management Access Points) and host systems. On iLO, access SMASH CLP through the SSH port. 


The IPMI specification is a standard that defines a set of common interfaces to a computer system. System administrators 
can use IPMI to monitor system health and manage the system. IPMI 2.0 defines a mandatory system interface, and an 
optional LAN interface. The iLO processor supports both interfaces. 


The IPMI specification defines a standardized interface for platform management. The IPMI specification defines the 
following types of platform management: 

e Monitors the status of system information, such as fans, temperatures, and power supplies 

e Recovery capabilities, such as system resets and power on/off operations 

* Logging capabilities for abnormal events, such as over-temperature readings or fan failures 

e Inventory capabilities, such as identifying failed hardware components 

IPMI commands are sent to iLO using a third-party or open source utility, such as IPMITOOL, IPMIUTIL, OpenIPMI or 
FreelPMI. 


You must be familiar with IPMI specifications when issuing raw commands. For additional information, see the IPMI 
specification on the Intel website at http://www.intel.com/content/www/us/en/servers/ipmi/ipmi-v2-rev1-1-spec- 
errata-6-markup.html?wapkw-ipmi. 


HPE Insight Control server deployment 


HPE Insight Control server deployment integrates with iLO to enable the management of remote servers and to monitor 
the performance of remote console operations, regardless of the state of the operating system or hardware. 


The deployment server provides the capability to use the power management features of iLO to power on, power off, or 
cycle power on the target server. Each time a server connects to the deployment server, the deployment server polls the 
target server to verify the presence of a LOM management device. If installed, the server gathers information, including 
the DNS name, IP address, and user login name. Security is maintained by requiring the user to enter the correct password 
for that user name. 


For more information about the Insight Control server deployment, see the documentation that ships on the HPE Insight 
software DVD, or the Hewlett Packard Enterprise website at http://www.hpe.com/info/insightcontrol. 
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HPQLOCFG usage 


The HPQLOCFG.EXE utility is a Windows-based utility that connects to iLO using a secure connection over the network. 
RIBCL scripts are passed to iLO over the secure connection to HPQLOCFG. This utility requires a valid user ID and 
password with the appropriate privileges. Launch the HPQLOCFG utility from SIM for Group Administration, or launch it 
independently from a command prompt for batch processing. 


Download this utility from the Hewlett Packard Enterprise website at: http://www.hpe.com/support/ilo5. 


Version 5.0.0 or later of HPQLOCFG is required to support all features of iLO 5 v1.10 


SIM discovers iLO devices as management processors. HPQLOCFG sends a RIBCL file to a group of iLO devices to manage 
the user accounts for those iLO devices. The iLO devices then perform the action designated by the RIBCL file and send a 
response to the log file. 


Use HPQLOCFG to execute RIBCL scripts on iLO. HPQLOCFG must reside on the same server as SIM. HPQLOCFG 
generates two types of error messages; runtime errors, and syntax errors. 


e Runtime errors occur when an invalid action is requested. Runtime errors are logged to the following directory:C : 
\Program Files\HP\Systems Insight Manager" 


e Syntax errors occur when an invalid XML tag is encountered. When a syntax error occurs, HPQLOCFG stops running 
and logs the error in the runtime script and output log file. Syntax errors use the following format: Syntax error: 
expected X but found Y .For example: 


= 


Syntax error: expected USER LOGIN-userlogin 
but found USER NAME-username 


If an enhanced security state is enabled in iLO 5 (for example, HighSecurity or FIPS), you must upgrade your installation 
of Microsoft .NET Framework to v4.5. Additionally, verify that the OS supports enhanced security protocols like TLS v1.1 
and TLS v1.2. 


Table 2: Usage requirements 


05 «МЕТ Framework HPQLOCFG with iLO 5 HPQLOCFG with higher 
version security set to Production security settings! 


Windows Server 20082 v4.0 or above v x 
v4.5 v x 
Windows 7 and Windows v4.0 or lower v x 


Server 2008 R2 


v4.5 v v 
Windows 8 and Windows v4.0 or lower v X 
Server 2012 

v4.5 v v 


1 This refers to using HPQLOCFG in an environment in which the iLO 5 security state is set to HighSecurity, FIPS, or CNSA/SuiteB mode. 


2 Oncertain operating systems, such as Windows Server 2008 , even with .NET Framework v4.5 installed, TLS v1.1 and TLS v1.2 are not 
supported by the OS itself. 
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Configuring for unauthenticated XML queries 


If configured to do so, iLO returns identifying information in response to an unauthenticated XML query. By default, the 
iLO device is configured to return this information. 


This setting must be enabled to successfully perform device discoveries with HPE SIM. 
Procedure 


1. To disable this feature in the CLI, set the CIM SECURITY. MASK in theMOD SNMP IM SETTINGS command to 
disable unauthenticated XML query return information. 


This feature is called Anonymous Data in the iLO web interface. You can configure it in the Network section on the 
Access Settings page. For more information, see the HPE iLO 4 User Guide. 


2. To view unauthenticated identifying information, enter the following command to the iLO web server port: 
https: //<iloaddress>/xmldata?item=all 


You can also view unauthenticated identifying information by clicking View XML in the iLO web interface. For more 
information, see the HPE iLO 4 User Guide. 


A typical response follows: 


<RIMP> 
<HSI> 
<SBSN>ABC12345678</SBSN> 
<SPN>ProLiant BL460c</SPN> 
<UUID>BL4608CN71320ZNN</UUID> 
<5Р>0</5Р> 
<cUUID>36344C42-4E43-3830-3731-33305A4E4E32</cUUID> 
<VIRTUAL> 
<STATE>Inactive</STAT 
<VID> 
<BSN/> 
<cUUID/> 
</VID> 
</VIRTUAL> 
<PRODUCTID>BL4608-101</PRODUCTID> 
<NICS> 
<NIC> 
<PORT>1</PORT> 
<MACADDR>00:17:a4:77:08:02</MACADDR> 
</NIC> 
<NIC> 
<PORT>2</PORT> 
<MACADDR>00:17:a4:77:08:04</MACADDR> 
</NIC> 
<NIC> 
<PORT>3</PORT> 
<MACADDR>00:17:a4:77:08:00</MACADDR> 
</NIC> 
<NIC> 
<PORT>4</PORT> 
<MACADDR>9c: 8e:99:13:20:cd</MACADDR> 
</NIC> 
<NIC> 
<PORT>5</PORT> 


9 
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«MACADDR»9c:8e:99:13:20:ca«/MACADDR» 
</МІС> 
<МІС> 
<PORT>6</PORT> 
<MACADDR> 9c: 8e:99:13:20:ce</MACADDR> 
</NIC> 
<NIC> 
<PORT>7</PORT> 
<MACADDR> 9c: 8e: 99:13:20:cb</MACADDR> 
</NIC> 
<NIC> 
<PORT>8</PORT> 
<MACADDR>9c: 8e: 99:13:20:cf</MACADDR> 
</NIC> 
</NICS> 
</HSI> 
<MP> 
<ST>1</ST> 
<PN>Integrated Lights-Out 5 (iLO 5)</PN> 
<FWRI>1.15</FWRI> 
<CID>0x0</CID> 
<BBLK/> 
HWRI>ASIC: 19</HWRI> 
SN>ILOd1360genten2345</SN> 
UID>1IL0679119d1360gente</UUID> 
PM>1</IPM> 
550>1</550> 
PWRM>UNKNOWN< / PWRM> 
RS>0</ERS> 
EALERT>1</EALERT> 


</MP> 

<HEALTH> 

<STATUS>2</STATUS> 
</HEALTH> 

</RIMP> 


Creating a system collection in HPE SIM 


To quickly see all system management processors, login to SIM and in the System and Event Collections panel, scroll 


down to and select All Management Processors. The All Management Processors page appears. 


Procedure 


1. 


2. 


3. 


6. 


7. 


To create a custom group of all iLO devices (ог by iLO version), create a system collection. 

In the System and Event Collections panel, click Customize. The Customize Collections page appears. 

In the Show collections of dropdown list, select Systems. All available system or cluster collections appear. 
Click New. The New Collection section appears. 

Select Choose members by attributes. 

In the Search for dropdown list, select systems . 


In the where dropdown, select system sub type, and select is from the inclusion/exclusion dropdown. 


Cd HPQLOCFG usage 


13 


8. Select an Integrated Lights-Out choice from the system sub type dropdown at the right. 


9. Click one of the following: 


e View — to run the search and display results immediately. 
е Save as Collection — to save the collection. 


e Cancel — to close the New Collection section without saving any changes. 


Launch applications with HPE SIM custom tools 


Use custom tools in SIM to combine RIBCL, HPQLOCFG, and system collection to manage Group Administration of iLO 
devices. Custom tools are executed on the CMS and on target systems. You can create a remote tool that runs on selected 
target systems, and even schedule its execution. 


For more information about custom tools, see the SIM help. 


Batch processing using HPQLOCFG 


Group Administration is also delivered to iLO through batch processing. The components needed for batch processing are 
HPQLOCFG, a RIBCL file, and a batch file. 


The following example shows a sample batch file used to perform the Group Administration for iLO: 


REM Updating the HPE Integrated Lights-Out 5 board 

REM Repeat line for each board to be updated 

REM 

HPQLOCFG -S ILO1 -F C:N...SCRIPT.XML -L ILO1LOG.TXT -V 
HPQLOCFG -S ILO2 -F C:\...SCRIPT.XML -L ILO2LOG.TXT -V 
HPQLOCFG -S ILO3 -F C:\...SCRIPT.XML -L ILO3LOG.TXT -V 


HPQLOCFG -S ILO<N> -F C:\...SCRIPT.XML -L ILO<N>LOG.TXT -V 


HPQLOCFG overwrites any existing log files. 


HPQLOCFG command line parameters 


For information on the syntax of the XML data files, see RIBCL XML Scripting Language. 


Download sample XML scripts from the Hewlett Packard Enterprise website: 


e Windows: 


http:/www.hpe.com/support/windows-sample-scripts 


e Linux: 


http://www.hpe.com/support/linux-perl-sample-scripts 


Using quote characters 


The restrictions for using single and double-quote characters are based on whether they are passed to HPQLOCFG inside 
an XML script or on the command line. 
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Quotes inside XML scripts 


When using an XML script to enter the user name and password use the double-quote (") as delimiters. However, if you 
must use " inside the user name or password in the XML file Cif the user name or password has double quotes in it), 
change the outside double-quote delimeters to single quotes C). 


For example, consider a username with quotes in it: 
Sample"simple"name 
This must be in an XML script as: 


'Sample"simple"name' 


un 


NOTE: Support for Windows-specific smart-quotes (“” and ' ) as content delimiters in XML is being phased out. Be sure to 
replace any smart-quote characters in your script with normal double or single quotes (" and '). 


Quotes on the command line 


When using HPQLOCFG or LOCFG and entering the password or command on the command line with the -р option, you 
cannot normally use the double-quote special character (^, except when using an ampersand (&) or less-than (<) symbol. 
To enter a password or command that uses either of these special characters, use double-quotes. 


For example: 


e "admin&admin" 

e "admin«admin" 

When using LOCFG and entering the password or command on the command line with the -i option, do not include 
double-quotes around the password. 

For example: 

admin&admin 

admin<admin 

Passwords or commands delimited with double-quotes do not work on the LOCFG command line with the —i option. 


When using LOCFG, to enter a username or password containing the exclamation symbol (D on the command line, use 
single quotes. 


For example: 


‘admin! admin’ 


Command line switches 


The following command line switches are available to be used with HPQLOCFG.EXE: 


Cd HPQLOCFG usage 15 


Table 3: HPQLOCFG command line switches 


Switch Effect 
la—————————Á mM ——— ——————————————————————————— ---—-——— i 
-S 


Determines the iLO that is to be updated. This switch is followed by either the DNS name 
or IP address of the target server. When using ІРуб addresses, you can optionally add the 
port number preceded by a colon (<IPv6_address:port>). 


NOTE: Do not use this switch if you are launching from SIM. SIM automatically provides 
the address of the iLO when you launch HPQLOCFG. 


Full path location and name of the RIBCL file that contains the actions to be performed. 


User login name. Entering this at the command line overrides the user login name from the 
script. 


Password. Entering this at the command line overrides the password from the script. 


Defines the log file name and file location. If this switch is omitted, a default log file with the 
DNS name or the IP address is created in the same directory used to launch HPQLOCFG. 
Ensure that HPQLOCFG is in a directory referenced by the PATH environment variable. 
Any log files generated are placed in the same directory as the HPQLOCFG executable.This 
switch cannot designate an output log filename. The default filename is based on the DNS 
name or the IP address. 


NOTE: Do not use this switch if launching from SIM. 


The output values may need to be modified to match the RIBCL syntax. 


Enables verbose message return. The resulting log file contains all commands sent, all 
responses received, and any errors. By default, only errors and responses from GET 
commands are logged without this switch. 


-t namevaluepairs ; . : Р ; Е : 
The-t namevaluepairs switch substitutes variables ($variables*)in the input 


file with values specified in name-value pairs. Separate multiple name-value pairs with a 
comma. See Using variables and name value pairs with HPQLOCFG. 


1 The -L and -V switches might or might not be set depending on the IT administrator preferences. 


Using variables and name value pairs with HPQLOCFG 


See the scripts below for examples of successfully using name value pairs. 


Script prepared for variables (Get Asset Тад. хт1) 


T 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"$user$" PASSWORD-"$password$"» 
«SERVER INFO MODE-"read"» 
«GET ASSET TAG/» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 
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To execute this script correctly, use the -t namevaluepairs switch on the command line: 


hpqlocfg.exe -f get asset tag.xml -s <serverip> -t user-Admin,password-pass 


If the parameter contains multiple words, you must enclose the phrase within double quotes (" "). Up to 50 variables are 
supported in an XML file. The maximum length of a variable or value is 255 characters. 
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LOCFG.PL usage 


LOCFG.PL Utility 


To use the LOCFG.PL utility, you must have the following PERL modules: 

* Net::SSLeay 

e I0::Socket::SSL 

You must also have a valid iLO user account and password for each XML script to use LOCFG.PL. To process the request, 
your account must have the appropriate iLO privileges. 

The LOCFG. PL script connects to iLO using an SSL connection. 


For example: 


perl locfg.pl -s {servername|ipaddress}[:port] [-l logfilename] -f 
input filename [-u usernam p password] [i105] 


LOCFG.PL command line switches 


The following command line switches are available to be used with LOCFG.PL: 


Table 4: LOCFG.PL command line switches 


Switch Effect 


5 servernam or 


; servername: DNS name of target server. Do not use this switch if launching from SIM. 
ipaddress 


ipaddress: IP address of the target server. Do not use this switch if launching from SIM. 


:port . oe 
If a port is not specified, the port defaults to : 443. 


-1 logfilename : : : . 
Name of the file to log all output to. A default file with the server name and IP address is 


created if this option is not specified. Do not use this switch if launching from SIM. 


-f input filename : EM 
= Filename containing the RIB commands. 


-u username . . : . А . 
Command line user name. Entering this at the command line overrides the user login name 


from the script. 


- assword 1 
par Command line password. Entering this at the command line overrides the password from 


the script. 


-t namevaluepairs . і . N . . 2 
The-t namevaluepairs switch substitutes variables (буасіар1е%)уіпіһе input 


file with values specified in name-value pairs. Separate multiple name-value pairs with a 
comma. 


Table Continued 
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Switch Effect 


-i 
Enables interactive input of username and password. 

-V . H H 
Enables verbose message mode. The resulting log file contains all commands sent, all 
responses received, and any errors. By default, only errors and responses from GET 
commands are logged without this switch. 

-ilo5 


Specifies the type of targeted management processor. This flag is optional. Without this 
flag, LOCFG.PL detects the iLO type automatically. The iLO 5 firmware performs better 
when this flag is present. 


1 Use -u and -р with caution, because command line options are visible on Linux systems. 


For more information, see RIBCL XML Scripting Language. 
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HPONCFG online configuration utility 


HPONCFG 


The HPONCFG utility is an online configuration tool used to set up and configure iLO from within Windows and Linux 
operating systems without requiring a reboot of the server operating system. HPONCFG runs in a command line mode 
and must be executed from an operating system command line using an account with administrator or root access. 
HPONCFG provides a limited graphical interface for servers that use Windows operating systems. 


HPONCFG supported operating systems 


e  HPONCFG Windows 64 bit 
o Windows Server 2012 


o Windows Server 2012 Essentials 


e HPONCFG Linux 64 bit 
o Red Hat Enterprise Linux 7 Server 
о Red Hat Enterprise Linux 6 Server (x86-64) 


о SUSE Linux Enterprise Server 12 


o 


SUSE LINUX Enterprise Server 11 (AMD64/EM64T) 


o 


SUSE LINUX Enterprise Server 10 (AMD64/EM64T) 


e VMware 
о VMware 5 
o VMware 6 


HPONCFG requirements 


e Windows-based servers— The following channel interface driver installation must be loaded оп the server: 


HP ProLiant iLO 5 Channel Interface Driver for Windows 


e Linux-based servers—The HP ProLiant iLO Channel Interface (KMOD/KMP) must be loaded on the 
server, which includes a health driver package. Each SPP includes the necessary interface and health drivers, and the 
package is also available from the Hewlett Packard Enterprise website at: http://www.hpe.com/support/ilo5. 


Installing НРОМСЕС 


The HPONCFG utility is delivered in separate packages for Windows and Linux operating systems. For Windows operating 
systems, it is included as a smart component. For Linux operating systems, it is included as an RPM package file. 
HPONCFG packages are included in the Service Pack for ProLiant (SPP). 


Download SPP at http://www.hpe.com/servers/spp/download. 
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Windows server installation 


HPONCFG installs automatically when the SPP is installed. To install HPONCFG manually, run the self-extracting 
executable. 


НРОМСЕС creates a directory at: 


$Program files%\Hewlett Packard Enterprise\HPONCFG 


Linux server installation 


HPONCFG is installed automatically when Service Pack for ProLiant is installed. Download the HPONCFG RPM package 
for Linux distributions from the Hewlett Packard Enterprise website. Install the appropriate package using the RPM 
installation utility. 


For example, for a package installation, install the HPONCFG RPM package on Red Hat Enterprise Linux 6 by entering the 
following command: 


rpm -ivh hponcfg-5.x.x-x.x86 64.rpm 


Ө! IMPORTANT: The following Linux commands must be installed and working before attempting їо use HPONCFG 
5.0.0 on Linux: 


* strings 
* which 


* idconfig 


* awk 

* grep 
* Sort 
* head 


After installation, the HPONCFG executable is located in the / sbin directory. Be sure that the appropriate Management 
Interface Driver is loaded. For details about where to obtain this driver and file, see HPONCFG requirements. 


НРОМСЕС utility 


The HPONCFG configuration utility reads an XML input file, formatted according to the rules of the RIBCL language, and 
produces a log file containing the requested output. 


A package containing various and comprehensive sample scripts is available for download on the Hewlett Packard 
Enterprise website: 


e Windows sample scripts: http://www.hpe.com/support/windows-sample-scripts 


e Linux sample scripts: http://www.hpe.com/support/linux-perl-sample-scripts 


Typical usage is to select a script that is similar to the desired functionality and modify it for your exact requirements. 


Although no authentication to iLO is required when iLO is set to the Production security state, the XML syntax requires 
that the USER LOGIN and PASSWORD tags are present in the LOGIN tag, and that these fields contain data. To 
successfully execute HPONCFG, the utility must be invoked as Administrator on Windows servers and as root on Linux 
servers. HPONCFG returns an error message if you do not possess sufficient privileges. 
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Ө! IMPORTANT: НРОКСЕС is supported іп Windows when iLO 5 is set to Production mode only. The utility is 
supported in Linux when iLO 5 is set to a higher security mode, such as HighSecurity, FIPS, or CNSA/SuiteB, and 
requires authentication. 


HPONCFG command line parameters 


HPONCFG accepts the following command line parameters: 


Table 5: HPONCFG command line parameters 


Parameter Effect 
=== иии —— —""CGO———À—»"€UO!""II!"—"——X————————————————————————— ——— 
/hel 
5 Displays the help page 
or ? 
/reset 


Resets the iLO to factory default values 


/iLO reboot : . . . 
za Reboots the iLO without changing any settings. 


/f filename А А : ' ; — ; А 
Sets and receives the iLO configuration from the information given іп the XML input Не that 


has name £ilename 

fX — WP À À ; 
Sets and receives iLO configuration from XML input received through the standard input 
stream 


/w filename . . i 7 . . . 
Writes the iLO configuration obtained from the device to the XML output file named 


filename 


/а or /all Capture the complete configuration of iLO to a file. Must be used with /w command line 
parameter. 


/l filename Р : ; 
Logs replies to the text log file that has name filename 


/v or /xmlverbose Display all the responses from iLO. 


/в namevaluepair . р : : DE КЕЛЕСІ 
Substitutes variables present in the input config file with values specified іп 


or/substitute namevaluepair 


namevaluepair 


/get hostinfo . . : . 
Е Receives the host information. Returns the server name and server serial number 


/m АЕ 
Indicates the minimum firmware level that should be present іп the management device to 
execute the RIBCL script. If at least this level of firmware is not present, HPONCFG returns an 
error without performing any additional action 


Table Continued 
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Parameter Effect 


/mouse ы - А : : 
Configures the server for optimized mouse handling to improve graphical remote console 


performance. By default, it optimizes for remote console single cursor mode for the current 
user. The dualcursor command line option, along with the mouse option, optimizes 
mouse handling as suited for remote console dual-cursor mode. The allusers command 
line option optimizes mouse handling for all users on the system. This option is available only 
for Windows 


/displa 
Paay Configures Windows display parameters to optimize graphical remote console display 


performance 


These parameters must be preceded by a slash (/) in Windows or a hyphen (-) in Linux as specified іп the usage string. 


For example, in Windows: 


hponcfg /f add user.xml /1 log.txt > output.txt 


Using HPONCFG on Windows servers 


Start the HPONCFG configuration utility from the command line. When using Windows, open a command window by 
selecting Start > Run and entering cmd. Change to the Program files%\Hewlett Packard Enterprise 
\HPONCFG directory and then enter the your commands. Enter HPONCFG with no parameters to display a usage page. 
HPONCFG accepts a correctly formatted XML script. 


For more information about formatting XML scripts, see RIBCL XML Scripting Language. 


The command line format is: 


hponcfg /help 
hponcfg /m firmwarelevel 
hponcfg /reset [/m firmwarelevel][/u username][/p password] 
hponcfg /iLO reboot [/m firmwarelevel][/u username][/p password] 
hponcfg /f filename [/1 filename][/s namevaluepairs][/u username] 
[/p password][/m firmwarelevel][/v] 
hponcfg /i [/1 filename][/s namevaluepairs][/u username][/p password] 
[/m firmwarelevel] [/v] 
hponcfg [/a] /w filename [/m firmwarelevel] [/u username] [/p password] 
hponcfg /get hostinfo [/m firmwarelevel] [/u username] [/p password] 
hponcfg /mouse [/dualcursor] [/allusers] 
hponcfg /display [/allusers] 


Using HPONCFG on Linux servers 


Invoke the HPONCFG configuration utility from the command line. НРОМСЕС displays a usage page if it is entered with no 
command line parameters. 


The command line format is: 


hponcfg -? 

hponcfg -h 

hponcfg  -m minFw 

hponcfg -r [-m minFw] 

hponcfg -b [-m minFw] 

hponcfg [-a] -w filename [-m minFw] 

hponcfg -g [-m minFw] 

hponcfg -f filename [-1 filename] [-s namevaluepair] [-v] [-m minFw] 
[-u username] [-p password] 
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hponcfg i [-l filename] [-s namevaluepair] [-v] [-m minFw] 
[-u username] [-p password] 


Table 6: HPONCFG Linux command line parameters 


Parameter Effect 
—— r —————————— ыы ——————————————————————————ssmnÀ—Querl 
-h Display the help page. 
--help 
zum 
= Е Reset the Management Processor їо factory default values. 
-—reseét 
-b Reboots the Management Processor without changing any settings. 
--reboot 
-f filename Sets and receives the Management Processor configuration from the information given 


in the XML input file that has name filename. 1 


file filenam 


=i Sets and receives Management Processor configuration from XML input received 
, through the standard input stream. 1 
——Xnput 
-w filename Writes the Management Processor configuration obtained from the device to the XML 
. : output file named filename. 
--writeconfig 
filename 
-a Capture the complete configuration of the Management Processor to a file. Must be 
used with -w command line parameter. 
--а11 
-1 filename Logs replies to the text log Не that has name filename. 


--log filename 


-V Display all the responses from the Management Processor. 
--xmlverbose 
-s namevaluepair Substitutes variables present in the input config file with values specified in 
: namevaluepair. 
--substitute 
namevaluepair 
-g Receives the host information. Returns the server name and server serial number. 


--get hostinfo 


-m Indicates the minimum firmware level that should be present in the management device 
; to execute the RIBCL script. If at least this level of firmware is not present, HRONCFG 
--minfwlevel : : 24% : 
returns an error without performing any additional action. 
-u The iLO username credential of the user initiating the action. 1 
--username 
=p The iLO password credential of the user initiating the action. + 
--password 
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1 when entity processing tags аге used inside XML that is passed through the -f or -i option, іп addition to using -u and -p to send 
username and password in high security states, do not use entity substitution for the username and password in the command line. For 
example, hponcfg -f filename.xml -u admin -p admin&123.Do пої иѕе admin&amp; 123. 


Obtaining the basic configuration 


Use НРОМСЕС to obtain a basic configuration from iLO 5 by executing the utility from the command line without 
specifying an input file. You must provide the name of the output file on the command line. 


For example: 
hponcfg /w config.xml 


In this example of a typical output file, the utility indicates that it obtained the data successfully and wrote the data to the 


output file: 
<!-- HPONCFG VERSION = "5.0.0.0" --> 
<!-- Generated 04/01/2017 20:14:12 --> 


<RIBCL VERSION="2.1"> 


«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
«DIR INFO MODE="write"> 
«MOD DIR СОМЕІб> 
«DIR AUTHENTICATION ENABLED VALUE = "N"/> 
«DIR LOCAL USER ACCT VALUE = "Y"/> 
«DIR SERVER ADDRESS VALUE = ""/> 
«DIR SERVER PORT VALUE = "636"/> 
«DIR OBJECT DN VALUE = ""/> 
<DIR_OBJECT PASSWORD VALUE = ""/> 
«DIR USER CONTEXT 1 VALUE = ""/> 
«DIR USER CONTEXT 2 VALUE = ""/> 
«DIR USER CONTEXT 3 VALUE = ""/> 
«/MOD DIR CONFIG» 
«/DIR INFO» 
<КІВ INFO MODE="write"> 
«MOD NETWORK SETTINGS» 
«SPEED AUTOSELECT VALUE = "Y"/> 
«NIC SPEED VALUE = "10"/> 
«FULL DUPLEX VALUE = "N"/> 
<DHCP ENABLE VALUE = "Y"/> 
<DHCP GATEWAY VALUE = "Y"/> 
<DHCP DNS SERVER VALUE = "Y"/> 
<DHCP STATIC ROUTE VALUE = "Y"/> 
<DHCP WINS SERVER VALUE = "Y"/» 
<REG WINS SERVER VALUE = "Y"/> 
<ІР ADDRESS VALUE = "192.168.1.3"/> 
<SUBNET MASK VALUE = "255.255.255.0"/> 
<GATEWAY IP ADDRESS VALUE = "192.168.1.1"/» 
<DNS_ NAME VALUE = "ILODNSNAME"/> 
<DOMAIN NAME VALUE = "hp.com"/> 
<PRIM DNS SERVER value = "192.168.1.2"/> 
<SEC_DNS SERVER value = "0.0.0.0"/> 
«TER DNS SERVER value = "0.0.0.0"/> 
<PRIM WINS SERVER value = "0.0.0.0"/> 
<5ЕС МІМ5 SERVER value = "0.0.0.0"/> 
<STATIC ROUTE 1 DEST = "0.0.0.0" GATEWAY = "0.0.0.0"/> 
<STATIC ROUTE 2 DEST = "0.0.0.0" GATEWAY = "0.0.0.0"/> 
<STATIC_ROUTE 3 DEST = "0.0.0.0" GATEWAY = "0.0.0.0"/> 
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«/MOD NETWORK SETTINGS» 
«/RIB INFO» 
«USER INFO MODE-"write"» 
XADD USER 
USER NAME - "admin" 
USER LOGIN - "admin" 
PASSWORD = "$user password$"» 
«ADMIN PRIV value = "Ү"/> 
<REMOTE CONS PRIV value = "Y"/» 
«RESET SERVER PRIV value = "Y"/» 
«VIRTUAL MEDIA PRIV value = "Y"/» 
«CONFIG ILO PRIV value - "Y"/» 
«/ADD USER» 
«/USER INFO» 
</LOGIN> 
</RIBCL> 


NOTE: For security reasons, user passwords are not returned. 


Obtaining a specific configuration 


Obtain a specific configuration using the appropriate XML input file. 


For example, the following is the contents of a typical XML input file: 


get_global 


.xml 


<!-- Sample file for Get Global command --> 


т 
P. 


«RIBCL V 
«LOGIN USI 
«RIB INFO 
«GET G 


OBAL 5 


"ML 
Bye 


MODI 


«/RIB INFO 
«/LOGIN» 
«/RIBCL» 


> 


RSION-"2.0"» 
ER LOGIN-"x" PASSWORD-"x"» 


ead"» 


ETTINGS /» 


The XML commands аге read from the input Ше дес gl1obal.xml and аге processed by the device: 


hponcfg /f get global.xml 


/1 


log.txt » output.txt 


The requested information is returned in the log file, which, in this example, is named Log. txt. 


«GET GLOBAL SETTINGS» 
<!-- А session timeout value of zero means that the timeout is set to infinite. --> 

«SESSION TIMEOUT VALUE-"0"/» 

«F8 PROMPT ENABLED VALUE-"Y"/» 

«F8 LOGIN REQUIRED VALUE-"N"/» 

<НТТР5 PORT VALUE-"443"/» 

«HTTP PORT VALUE-"80"/» 

<REMOTE CONSOLE PORT VALUE="17990"/> 

«VIRTUAL MEDIA PORT VALUE="17988"/> 

«SNMP ACCESS ENABLED VALUE-"Y"/» 

«SNMP PORT VALUE-"161"/» 

«SNMP TRAP PORT VALUE-"162"/» 

«SSH PORT VALUE-"22"/» 

«SSH STATUS VALUE-"Y"/» 

«SERIAL CLI STATUS VALUE-"Enabled-Authentication Required"/» 
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«SERIAL СІІ SPEED VALUE="9600"/> 

«VSP LOG ENABLE VALUE-"N"/» 

«MIN PASSWORD VALUE-"8"/» 

<АОТНЕМТІСАТІОМ FAILURE LOGGING VALUE-"Enabled-every 3rd failure"/» 
«RBSU POST IP VALUE-"Y"/» 

<ENFORCE AES VALUE="N"/> 

<IPMI_DCMI_OVER_LAN ENABLED VALUE-"Y"/» 

<REMOTE SYSLOG ENABLE VALUE="N"/> 

<REMOTE SYSLOG PORT VALUE="514"/> 

<REMOTE SYSLOG SERVER ADDRESS VALUE="192.0.2.20"/> 


<ALERTMAIL ENABLE VALUE="N"/> 
<ALERTMAIL EMAIL ADDRESS VALUE=""/> 
5 ER DOMAIN VALUE-""/» 
<ALERTMAIL SMTP PORT VALUE-"25"/» 
<ALERTMAIL SMTP SERVER VALUE=""/> 
<PROPAGATE TIME TO HOST VALUE-"Y"/» 
«/GET GLOBAL SETTINGS» 


2 
о 


NOTE: The key designation іп the two parameters F8 PROMPT ENABLED and F8 LOGIN, REQUIRED refer to previously 
assigned function keys for starting UEFI/RBSU in previous generations of HPE systems. For Gen10, the key to press for 
this function has changed to F9. To ensure backward compatibility, the parameter names have not been changed. 


Setting a configuration 


Set a specific configuration by using the command format: 
hponcfg /f add user.xml /1 log.txt 
In this example, the input file has contents: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"x" PASSWORD-"x"» 
«USER INFO MODE-"write"» 

<АРр USE 
USER NAME-"Landy9" 
USER LOGIN-"mandy8" 
PASSWORD="floppyshoes"> 
<ADMIN PRIV value ="No"/> 
<REMOTE CONS PRIV value ="Yes"/> 
<RESET SERVER PRIV value ="No"/> 
<VIRTUAL MEDIA PRIV value ="No"/> 
<CONFIG ILO PRIV value="Yes"/> 


T 


т 


The specified user is added to the device. 


Using variable substitution 


HPONCFG enables you to specify variables іп the XML RIBCL script and to assign values to those variables when you run 
НРОКСЕС. This feature helps to avoid rewriting the XML script file every time with different values. Anything enclosed Бу 
two percent sign C5) characters in the XML file is considered a variable. 


In this example, username%, ¢loginname% ,and $password$ are variables: 


<!-- Add user with minimal privileges to test default setting of --> 
<!-- assigned privileges to 'N' --> 
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<RIBCL version="2.1"> 
<LOGIN USER LOGIN-"x" PASSWORD="x"> 
<USER_INFO MODE="write"> 
«ADD USER USER_NAME="%susername%s" USER LOGIN-"$loginname$" PASSWORD-"$password 


5"> 


«RESET SERVER PRIV value-"Y" /> 
«ADMIN PRIV value-"Y" /> 
«/ADD USER» 
«/USER INFO» 
</LOGIN> 
</RIBCL> 


Specify values for the variables when you run HPONCFG by using the substitute option. The argument must be a string or 
variable name and value pairs must be separated by a comma C). The variable name and its value must be separated by 
an equal sign (=). For example: 


hponcfg /f add_user.xml /s username=testuser, loginname=testlogin, password=testpasswd 


In this example, shost_power% is a variable: 


<RIBCL VERSION="2.1"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<SERVER_INFO MODE-2"write"» 
«!-- Modify the HOST POWER attribute to toggle power on the host server 
--> Е 
«!-- HOST POWER-"No" (Turns host server power off) --> 
<!-- А graceful shutdown will be attempted for ACPI-aware --> 
<!-- operating systems configured to support graceful shutdown. --> 
«!-- HOST POWER-"Yes" (Turns host server power on) --> 
«SET HOST POWER HOST POWER-"$host power$"/» 


«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


Procedure 


• То power the system on, ente: hponcfg /f Set Host Power.xml /s host power-Yi 


ІЗІ 
о 


• То power the system off, enter: ҺропсҒа /Ғ Set Host Power.xml /s host power-NO 


Capturing and restoring a configuration 


Use HPONCFG to capture basic configuration information in an XML readable file format. Use this file to set or restore the 
iLO configuration. This feature is available with HPONCFG version 1.2 and later. HPONCFG writes the configuration 
information in the HPE RIBCL format. 


Procedure 


1. To capture a configuration, you must specify the name and location of the output file on the command line. 


See Obtaining the basic configuration for details. 


For example: 
hponcfg /w config.xml 
HPONCFG displays a message when it successfully writes the configuration information to the output file as 


requested. For security reasons, the default user administrator and user passwords are not captured in the 
configuration file or returned in the response. A variable is provided in its place to use with the substitute option 
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to provide a default password for all users when restoring a configuration. Manually change the password before using 
the file to restore the configuration. 


To restore a configuration, the file must be sent to HPONCFG as input using the /Ғ ог-Ғ option. Add a default 
password for all users using the substitute or s option. 


For example: 


hponcfg /f config.xml /s user password-password 
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SMASH CLP usage 


SMASH CLP 


The DMTF SMASH initiative is a suite of specifications that deliver architectural semantics, industry standard protocols 
and profiles to unify the management of the data center. The SMASH CLP specification enables simple and intuitive 
management of heterogeneous servers in the data center. 


For more information, see SMASH CLP Scripting Language. 
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ІРМІ usage 


Тһе ІРМІ utility 


Use the Linux IPMI tool and Windows IPMI util applications to test the IPMI interfaces on server platforms. The Linux IPMI 
tool is used in environments where scripting is used as the base for platform monitoring. 


The Windows IPMI util has a dependency on the IPMI driver if using "in-band" Cor from a command prompt). The Windows 
IPMI driver is delivered in Windows Server 2008 R2. IPMI support might be available in later updates of Windows Server 
2003 R2. 


The Linux IPMI tool also requires the IPMI drivers Cdelivered in the distribution) to be enabled if utilized in-band. The IPMI 
device drivers are not typically enabled to automatically start when the Linux operating system is started. If you are 
logged on to a Linux console (command prompt) as a root user, use the following command to initiate the IPMI device 
drivers based on your Linux version: 


e RHEL6,SLES10, SLES11:service ipmi start 


e RHEL7,SLES12:systemctl start ipmi.service 


For more information, see the documentation provided by the specific Linux distribution. 


The IPMI tool supports remote IPMI protocols that provide the capability to power the server on and off, and to remotely 
monitor the platform. The iLO firmware supports the IPMI 2.0 RMCP+ protocol for the highest level of authentication, 
encryption and integrity. The legacy IPMI 1.5 IPMI over LAN protocol is not supported. 


Basic IPMI tool usage 


The Linux IPMI tool is fully documented in the Linux MAN page. Theman ipmitool command provides extended 
documentation beyond the scope of this guide. To use IPMI tool from the Linux operating system to locally monitor a 
system, the IPMI drivers must be enabled. Typical in-band commands include the following. 


e To retrieve the iLO status, enter: ipmitool mc info 
e То retrieve the status of iLO monitored sensors, enter: ipmitool sensor list 


e To retrieve the contents of the IPMI SEL, enter:# ipmitool sel list 


Advanced IPMI tool usage on Linux 


The Linux IPMI tool has the capability to securely communicate with iLO using the IPMI 2.0 RMCP+ protocol. This is the 
ipmitool lanplus protocol feature. For most commands, a valid iLO user name and password is required. Typical 
out-of-band Cor IPMI over LAN) commands include the following. 


e To retrieve the general iLO status, enter: 


f ipmitool -H IP Address or FQDN -I lanplus -U user name -P password mc 
info 


• To power on the ProLiant Server, enter: 
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# ipmitool -Н IP Address or FQDN -I lanplus -U user name -P password 
chassis power on 


e Toturn оп the ProLiant Server UID, enter: 
f ipmitool -H IP Address or FQDN -I lanplus -U user name -P password 
chassis identify on 
Most Linux IPMI tool commands can be issued remotely, including retrieving the IML entries and current sensor readings. 
The following parameter is required to enable the IPMI 2.0 RMCP+ protocol: 


-I lanplus 


Advanced IPMlutil usage on Windows 


Use the Windows IPMIutil.exe application for remote IPMI access to iLO. The commands, although different, 
provide similar functionality. 


• To retrieve the general status of iLO, enter: 

C:\> ipmiutil.exe health -N IP Address -J 3 -U user name -P Password 
• To power the ProLiant server on, enter: 

C:\> ipmiutil.exe reset -u -N IP Address -J 3 -U user name -P Password 
• To power the ProLiant server off, enter: 

C:\> ipmiutil.exe reset -d -N IP Address -J 3 -U user name-P Password 
e Toturn on the ProLiant server UID, enter: 


C:\> ipmiutil.exe leds -i5 -N IP Address -J 3 -U user name -P Password 


NOTE: The IPMIutil application only enables turning on the UID for five seconds. To keep the UID light on persistently, 
script the command in a loop with a four second delay. 
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SMASH CLP Scripting Language 


SMASH CLP command line overview 


SMASH CLP provides a standardized set of commands for the configuration and control of management processors 
(called Management Access Points) and host systems. Оп iLO, SMASH CLP is accessed through the SSH port. 


SMASH CLP command line access 


The iLO 5 firmware features enable you to execute the supported commands from a SMASH CLP command line. Access 
the command line option from the one of the following interfaces: 


• A serial port using one connection. Access the iLO CLI by entering ESC ( 


е Anetwork using SSH. This enables multiple simultaneous connections (an IP address or DNS name, login name, and 
password are required to start a session using SSH) 
Five network connections can be active simultaneously. 


The SSH session starts after authentication. The maximum length of login name is 127 characters and the password 
length is limited to 65 characters. 


NOTE: Enable the Serial Command Line Interface Status on the Security > Access Settings screen of the iLO 5 web 
interface before attempting to connect using a serial port connection. 


Security states and privileges in iLO 5 

SMASH CLP does not support the following: 

e Setting iLO security states. 

e Тһе extended user privileges available from the iLO 5 web interface. 


e iLO 5 CNSA/SuiteB security state. 


For more information about setting iLO security states or extended user privileges, see the HPE iLO 5 User Guide at 
http://www.hpe.com/support/ilo-docs. 


Using the command line 


After initiating a command line session, the iLO CLI prompt appears. Each time you execute a command Cor you exit the 
Remote Console or VSP), you return to the CLI prompt as shown in the following example: 


hpiLo-> 


Each time a CLI command executes, the returned output follows this general format: 


hpiLO-» CLI command 

status=0 

Status tag-COMMAND COMPLETED 
. output returned... 

hpiLo-> 
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If an invalid command is entered, then the status and status tag values reflect the error as shown: 


hpiLO-» boguscommand 
status-2 
Status tag-COMMAND PROC 


ESSING FAIL 


error tag-COMMAND NOT R 


ECOGNIZI 


ED 
Б 
Е 


If an invalid parameter is given to a valid command, the response is slightly different: 


hpiLO-» show /bad 


status-2 
Status tag-COMMAND PROC 


hpiLO-» 


ESSING FAIL 
error tag-INVALID OPTION 


The privilege level of the logged in user is verified against the privilege required for the command. The command is only 
executed if the privilege levels match. If the serial command line session status is set to Enabled-No 
Authentication, then all the commands are executed without verifying the privilege level. 


The general syntax of a CLP command is: 


«verb» «target» «option» «property» 


• Verbs—The supported verbs are: 


о cd 


о create 


с delete 
* help 

о load 

9 reset 
9 set 

* show 

° start 
с stop 

о exit 


^ version 


e  Target— The default target is the /. Change the target using the cd command, or by specifying a target on the 


command line. 


е” Options—The valid options are: 


о -all 


è =a 


Cc} 
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* Properties — Are the attributes of the target that can be modified. 


* Output — The output syntax is: 


* Status 
9 Status tag 


e status msg 


The valid Boolean values for any command аге yes, no, true, false,y,n, t, Ё, 1, and 0. 


NOTE: If a CLP command spans more than one line, you cannot navigate between different lines. 


In the Windows PuTTy client, map the Backspace key to a value of Ox8 by changing the setting for Terminal Keyboard to 
Ctrl*H. 


Escape commands 
The escape key commands are shortcuts to popular tasks. 
ESC R ESC r ESC R 
Resets the system. 
ESC ^ 
Powers on the system. 
ESC ESC 
Erases the current line. 


There is a one second timeout for entering any of the escape sequence characters. 


Base commands 


Following are the base commands for use on the command line: 
help 

Displays context-sensitive help and all supported commands 
command help/? 

Displays the help message specific to that command 
exit 

Terminates the CLP session 
cd 


The command sets the current default target. The context works like a directory path. The root context for the server 
is a forward slash (/) and is the starting point for a CLP system. Shorten commands by changing the context. 


For example, to find the current iLO firmware version, enter the following command: 
show /mapl/firmwarel 
show 


The command displays values of a property or contents of a collection target. 
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Еог ехатріе: 


hpiLO-» show 
status-0 
Status tag-COMMAND COMPLETED 


/ 
Targets 
systeml 
mapl 
Properties 
Verbs 
cd version exit show 


The first line of information returned by the show command is the current context. In the example, / is the current 
context. Following the context is a list of subtargets (Targets) and properties (Properties) applicable to the current 
context. The verbs (Verbs) section shows which commands are applicable to this context. 


Specify the show command with an explicit or implicit context as well as a specific property. For example, an explicit 
context is /map1/firmwarel and is not dependent on the current context, while an implicit context assumes that 
the context specified is a child of the current context. If the current context is /map1 thena show firmware 
command displays the /map1/firmwarel data. 


If you do not specify a property, then all properties are shown. In the /map1 /firmwarel context, two properties 
are available: version, and date. If you execute show /mapl/firmwarel date, only the date is shown. 


create 


Creates a new instance of the MAP in the namespace. 


delete 


Removes instances of the MAP in the namespace. 


load 


Moves a binary image from a URL to the MAP. 
reset 

Causes a target to cycle from enabled to disabled, and back to enabled. 
set 


Sets a property or set of properties to a specific value, and resets iLO to implement the changes. 
start 

Causes a target to change the state to a higher run level. 
stop 

Causes a target to change the state to a lower run level. 


version 
The command queries the version of the CLP implementation or other CLP elements. 


For example: 


hpiLO-> version 
status=0 
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Status tag-COMMAND COMPLETED 


SM-CLP Version 1.0 


oemhpe ping 
The command determines if an IP address is reachable from the current iLO session. 
For example: 
hpiLO-» oemhpe ping 192.168.1.1 
Where 192.168.1.1 is the IP address you are testing. 
oemhpe clearRESTAPIstate 
The command clears any data cache stored by the HPE RESTful interface. 


For example: 


hpiLO-» oemhpe clearRESTAPIstate 
oemhpe ip6 
The command displays the iLO IPv6 settings and allows settings to be changed. 
Syntax: 
oemHPE ip6 OBJECT [COMMAND [args]] [dev n] 


OBJECTS Explanation 
prm————Ó—————————ÀMMáMá————— S HHHHHEEHEEEEEEEEM 
addr Specifies an IPv6é address/prefix for the NIC. 

route Specifies an IPv6 route via a gateway. 

gateway Specifies an IPv6 address for a gateway. 

dns Specifies an IPv6é address for a DNS server. 

options Options can be set to yes or no: 


e  |PV6 ACTIVE 

e SLAAC ADDR СЕС 

e DHCPV6 ADDR CFG 

e DHCPV6 OTHER СЕС 

e DHCPV6 RAPID СОММІТ 
e USE DHCPV6 DNS 

e USE ОНСРУ6 DOMAIN 

* USE DHCPV6 NTP 

e |PV6 PREFERRED 


e |PV6 ENABLE DDNS 


dev <O|1> Specifies the NIC. A value of 1 specifies the sideband NIC. A value of O (zero) 
specifies the dedicated NIC. If the dev is not specified, the currently active interface 
will be the target of the command. 
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COMMANDS Explanation 


add Adds the OBJECT. 

del Deletes the OBJECT. 

set Sets an OPTION to the specified value. 
default Returns an OPTION to the default value. 


NOTE: The command set can only be used when OBJECT=options. The command default can be used when 
OBJECT -options, ог can be used alone(oemHPE ip6 default) to return all ІРуб settings to default. Entering 
an OBJECT without a COMMAND displays the OBJECT status. Entering just oemhpe ipó displays the status for all 
IPv6 settings related to the active Ethernet device. 


For example: 


«/»hpiLO-» oemHP 
</>hpiLO-> oemHPE | 
«/»hpiLO-» oemHPE | 
</>hpiLO-> oemHPE | 
«/»hpiLO-» oemHPE _ 
«/»hpiLO-» oemHPE | 
«/»hpiLO-» oemHPE | 


addr {ааа | del) <address6/prefix> 

route {add | del) <dest_addr6/prefix> via «gw addr6» 
dns (add | del) <address6> 

gateway {add | del) <address6> 

options «set opt _name>=<value> 

options «default (opt name | ІРУ6 ALL}> 

default 


H- H- H- p H- H- H- 
'O оо 'g tg 'g 'g 
Оу Оу бу бу бу Оу Оз 


Ej Ed Dd Dd Dd БІ Dd 


oemhpe nicautosel 


The command allows iLO to automatically select between either the shared or dedicated network ports at startup. 
The feature looks for network activity on the ports, and the first port found with network activity is selected for use. 
Any changes to this setting do not take effect until the iLO is reset. 


Syntax: 


oemhpe nicautosel Method [sbvlan= <0-4094>] [sbport- <1-2>] [sbport limit-«0 or 2>] 
[delay=<90-1800>] 


Argument Effect 
Tý 


sbvlan Optional. Specifies the VLAN tag to be used for the shared NIC port. A value of 
zero disables the VLAN tag. 


sbport Optional. Specifies which port of the shared NIC will be shared with iLO. Verify 
your server and network adapter can support any values greater than 1. 


sbport_limit Optional. Specifies when shared NIC ports will be tested by NIC Auto-selection in 
addition to the dedicated NIC. Value must be O or 2: 


e O= Test only the currently configured port 


e 2 = Auto mode, tests both shared NIC ports 1 апа 2 


The default is 0. 


delay Optional. Specifies the number of seconds to test each NIC connection before 
moving to the next while searching. Default is 90 seconds. 


Table Continued 
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Argument Effect 


Methods 

disabled Disables NIC auto-selection. 

linkact Enables NIC auto-selection for any activity detection. 

rcvdata Enables NIC auto-selection for received data packet activity detection. 
dhcp Enables NIC auto-selection for DHCP address assignment. 

For example: 


hpilLO-» oemhpe nicautosel rcvdata 

This command enables the feature for received data packet activity detection. 
oemHPE nicfailover 

The command configures the NIC failover feature. 


Syntax: 


oemHPE nicfailover Method [delay=<30-3600>] 


Methods Effect 
EÁ 
disabled Disables NIC failover. 
linkact Е ` 7 : 
Enables NIC failover to a NIC with any activity detection. 
dat 
52479 Enables NIC Ғайомег to a NIC with received data packet activity detection. 
dhcp А : А 
Enables МІС failover їо а NIC with а DHCP address assignment. 
Argument 
delay Optional. Specifies the number of seconds to test each NIC connection before 


moving to the next while searching. Default is 300 seconds. 


NOTE: The command oemHPE nicautosel must also be enabled for oemHPE nicfailover to operate. If not already 
configured, oemHPE nicautosel will be enabled for the same Method with a default delay value. 


Using the NIC auto-selection feature 


To enable the NIC auto-selection feature, do the following: 
Procedure 


1. Configure both iLO network ports. 
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А. 


Л CAUTION: If any of the physical NICs are connected їо an unsecured network, unauthorized access attempts 
might occur when iLO is alternating between the iLO network ports. Hewlett Packard Enterprise strongly 
recommends that whenever iLO is connected to any network: 


e Use strong passwords for iLO access. 


e Never connect the iLO Dedicated Network Port to an unsecured network. 


e |f the iLO Shared Network Port is connected to an unsecured network, use VLAN tagging on the iLO portion 


of the shared NIC, and make sure that the VLAN is connected to a secure network. 


Before enabling and using the NIC auto-selection feature, both iLO network ports must be configured for their 
respective network environments. 


Enable the feature using the CLI command oemhpe nicautosel or by adding the command to the 
MOD. NETWORK SETTINGS script. 


If DHCP Address Assignment is being used for activity detection COemhpe nicautosel dhcp), then it should 
be enabled on at least one port with appropriate DHCP options. Either or both of IPv4 or IPv6 address assignment 
methods can be used. When both IPv4 and IPv6 DHCP is enabled, either protocol being assigned an address will be 
considered success during searching using DHCP Address Assignment detection. 


Arrange server cabling as desired, and then reset iLO. 


The change to NIC auto-selection does not take effect until iLO is reset. 


Specific commands 


The following sections cover specific iLO commands available when at the command line, including: 


User commands 


HPE SSO settings 


Network commands 


iLO 5 settings 
iLO embedded health settings 


SNMP settings 


License commands 


Directory commands 


Virtual Media commands 


Start and Reset commands 


Firmware commands 


Eventlog commands 


Blade commands 
Boot commands 


LED commands 
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е System properties and targets 


e Other commands 


User commands 


User commands enable you to view and modify user settings. User settings are available at: /map1/accountsl1. 
Targets 


All local users are valid targets. For example, if three local users have the login names Administrator, admin, and 
test, then valid targets are: 


* Administrator 
* admin 


e test 


Table 7: User Command Properties 


Property Access Description 


username read/write Corresponds to the iLO login name. 
password read/write Corresponds to the password for the current user. 
name read/write Displays the name of the user. If a name is not specified, the parameter uses the 


same value as the login name (username). This value corresponds to the iLO 
user name property. 
group read/write Specifies the privilege level. The valid values are as follows: 
* admin 
* config 
* oemHPE power 


e oemHPE rc 


e oemHPE vm 


If you do not specify a group, no privileges are assigned to the user. 


NOTE: For backwards compatibility, oemhp — is accepted in place of 
oemHPE . 


For example 
The current path is: 


/mapl/accountsl 
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e Inthis example, username corresponds to the login name: 


create username-lnamel password-password 


• Inthis example, 1 пате1 is the login name of the user: 


create /mapl/accountsl username=<lnamel> password=<pwd12345> 
name=<dnamel> group-«admin,config,oemhpe vm,oemhpe rc,oemhpe power» 


HPE SSO settings 


HPE SSO settings commands are accessed using: 


= 


/mapl/oemHPE ssocfgl 


You must have the Configure iLO Settings privilege to change these properties. SSO is only supported for browser access 
from trusted SIM servers. SSO is a licensed feature. Table 8: HPE SSO Properties shows the SSO properties. For more 
information, see the iLO User Guide on the Hewlett Packard Enterprise website at http://www.hpe.com/info/ilo/docs. 


Targets 


None 


Table 8: HPE SSO Properties 


Property Access Description 
pm——————————————— ————————————————Áó 


oemHPE ssotrust Read/write The Single Sign-On required trust level. Valid values are: 
* disabled 
* all 
* name 


* certificate 


oemHPE ssouser Read/write The privileges associated with the user role. Valid values are: 
* login 
* oemHPE rc 


* oemHPE power 


e oemHPE vm 
* config 


* admin 


Table Continued 
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Property Access Description 


= 


oemHPE ssooperator Read/write The privileges associated with the operator role. Valid values 
are: 


* login 
* oemHPE rc 


* oemHPE power 


e oemHPE vm 


* config 


* admin 
oemHPE ssoadministrato Read/write The privileges associated with the administrator role. Valid 
r values are: 

* login 


e oemHPE rc 


* oemHPE power 


e oemHPE vm 
* config 


* admin 


oemHPE ssoserver Read Contains O or more HPE SIM Trusted Server records. Each 
record contains a server name or a server certificate. 


For example 


• То set the SSO trust level to trust by certificate /»hpiLO-» set /mapl/oemHPE ssocfgl 
oemHPE ssotrust-certificate 


e To assign user roles the Login privilege:</>hpiLO-> set /mapl/oemHPE ssocfgl 


= 


oemHPE ssouser-login 


e To assign the operator role Login, Remote Console, Virtual Power and Reset, and Virtual Media privileges:< / 
>һрі10-> set /mapl/oemHPE ssocfgl 


- 


oemHPE ssooperator-login,oemHPE rc,oemHPE power,oemHPE vm 


e To Add a SIM Trusted Server name record:</>hpiLO-> cd mapl/oemHPE ssocfgl 


- 


«/mapl/oemHPE ssocfgl>hpiLO-> create hpsiml.corp.net 


e To load an SSO certificate from a SIM 7.0 server or later:</map1/oemHPE ssocfgl»hpiLO-» load 
http://«HP SIM name or network address>:280/GetCertificate?certtype=sso 
Or«/mapl/oemHPE ssocfgl>hpiLO-> load https://«HP SIM name or network 
address>:50000/GetCertificate?certtype=sso 
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• То delete oemHPE ssoserver with index 5:</mapl/oemHPE ssocfgl»hpiLO-» delete 5 


• To display the complete iLO SSO configuration:</>hpiLO-> cd mapl/oemHPE ssocfgl«/mapl/ 


= 


oemHPE ssocfgl»hpiLO-»show 


Network commands 


The network subsystems are located at: 


“ /mapl/enetportl 
e /mapl/dhcpendptl 
e /mapl/dnsendptl 
“ /mapl/gatewayl 

e /mapl/dnsserverl 
e /mapl/dnsserver2 
e /mapl/dnsserver3 
e /mapl/settingsl 


e /mapl/vlan1i 


See also oemhpe nicautosel іп Base commands. 


Table 9: /map1/enetport1 


Targets Properties 
p————Ó————————————————ÍÜ 


lanendpt1 e Autosense 
e PermanentAddress 
* LinkTechnology 
• Speed 
e SystemName 


* Fullduplex 


For example 
set /mapl/enetportl Speed-100 


set /mapl/enetportl1/lanendptl/ipendptl IPv4Address-15.255.102.245 
SubnetMask-255.255.248.0 
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Table 10: /map1/dhcpendpt1 


Targets Properties 


None • EnabledState 


е OtherTypeDescription 


Table 11: /map1/dnsendpt1 


Targets Properties 


None e EnabledState 


e HostName 


• DomainName 


е OtherTypeDescription 


Table 12: /map1/gateway1 


Targets Properties 


None e AccessInfo 
e AccessContext 


e DHCPOptionToUse 


Table 13: /map1/dnsserver1, dnsserver2, dnsserver3 


Targets Properties 


None e AccessInfo 


e AccessContext 
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Table 14: /map1/settings1 


Targets Properties 


pe — ———————— ————————!u ИС] 
DNSSettings1 е DNSServerAddress 


* RegisterThisConnection 
• DomainName 
e DHCPOptionToUse 


= 


* oemHPE UseDHCPv4DomainName 


WINSSettingData1 * WINSServerAddress 
* RegisterThisConnection 


e DHCPOptionToUse 


StaticlPSettings1 e oemHPE SRoutelAddress 
* oemHPE MasklAddress 
* oemHPE GatewaylAddress 
* oemHPE SRoute2Address 
* oemHPE Mask2Address 
* oemHPE Gateway2Address 
* oemHPE SRoute3Address 
* oemHPE Mask3Address 


- 


* oemHPE Gateway3Address 


* DHCPOptionToUse 


Table 15: /map1/vlan1 
Targets Properties 
TEMM) 
None * EnabledState 

. VLANID 
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NOTE: Verbs 
Network commands are compatible with the following verbs: 
* cd 


. version 


. exit 
e show 
. set 


Specify one or more properties on the command line. If multiple properties are on the same command line, they must be 
separated by a space. 


The iLO firmware resets after the network settings have been applied. 


For example, the following command sets the iLO network port to the shared network port NIC on the server 
motherboard. This NIC is referred to as the LOM elsewhere in iLO documentation. Not all servers have this hardware. 


Set /тар1/епеірогі1/1апепарё1 EnabledState-32768 


The following example sets the iLO network port to the optional shared network port NIC that can be plugged into the 
server in the FlexibleLOM slot on the server motherboard. This slot is not a standard PCI slot, but is a special horizontal 
connector in the back right hand corner of the motherboard. Not all servers have this slot, or the NIC that plugs into this 
slot. 


Set /mapl/enetportl/lanendptl EnabledState-32769 


iLO 5 settings 


The iLO 5 settings commands enable you to view or modify iLO 5 settings. Table 16: iLO Properties shows the iLO 5 
properties. The iLO 5 settings are located at: 


/mapl/configl 
Targets 
No targets 


Properties 


NOTE: All iLO properties listed are Read/Write access. 


Table 16: iLO Properties 


Property Description 


oemHPE mapenable Enables or disables iLO. Boolean values are accepted. 


oemHPE timeout Displays or modifies idle timeout setting, in minutes. Valid 
values are 15, 30, 60, and 120. 


oemHPE rbsuenable Enables or disables RBSU prompt during POST. Boolean values 
are accepted. 


Table Continued 
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Property 


Description 


oemHPE rbsulogin 


oemHPE rbsushowip 


oemHPE vsp log. enable 


oemHPE httpport 


oemHPE sslport 


oemHPE rcport 


oemHPE vmport 


oemHPE sshport 


oemHPE sshstatus 


oemHPE serialclistatus 


oemHPE serialcliauth 


oemHPE serialclispeed 


oemHPE minpwdlen 


oemHPE enforce aes 


oemHPE authfailurelogging 


oemHPE computer lock 


Enables or disables login requirement for accessing RBSU. 
Boolean values are accepted. 


Enables or disables iLO IP address display during POST. 
Boolean values are accepted. 


Enables or disables capture of virtual serial port output from 
the server. 


Sets the HTTP port value. 


Sets the SSL port value. 


Sets remote console port value. 


Sets virtual media port value. 


Sets the SSH port value. 


Enables or disables SSH. Boolean values are accepted. 


Displays or modifies serial port CLI status setting. Boolean 
values are accepted. 


Displays or modifies serial port CLI authorization status 
setting. Boolean values are accepted. 


Displays or modifies serial port CLI speed setting. 


Displays or modifies minimum password length setting. 


Displays or modifies AES encryption configuration. Valid values 
аге 'yes' or 'no'. This setting requires a forced logout for the 
changes to take place. 


Displays or modifies authentication failure logging setting. 


Displays or modifies Remote Console Computer Lock 
configuration. 


Table Continued 
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Property 


Description 


oemHPE hotkey ctrl 1, 

oemHPE hotkey ctrl u, 
oemHPE hotkey ctrl v, 
oemHPE_hotkey_ctrl_w, 
oemHPE_hotkey_ctrl_x, 


oemHPE_hotkey_ctrl_y 


oemHPE_irc_trust_enable 


oemHPE_snmp_access 


oemHPE_snmp_port 


oemHPE_snmp_trapport 


oemHPE_fips_enable 


oemHPE_ipmi_dcmi_overlan_enable 


oemHPE_ipmi_dcmi_overlan_port 


oemHPE_ribcl_status 


oemHPE_webserver_status 


oemHPE_webgui_status 


oemHPE_virtual_media_status 


oemHPE_remote_console_status 


Displays or modifies remote console hotkey configuration. 


Displays or modifies iLO Trusted Certificate check for 
Integrated Remote Console. 


Displays or modifies SNMP Access. 


Displays or modifies SNMP port setting. 


Displays or modifies SNMP Trap port setting. 


Displays or modifies FIPS mode setting. 


Displays or modifies IPMI status setting. Valid values are yes 
or no. 


Displays or modifies IPMI port setting. Valid value is between 1 
and 65535. 


Displays or modifies RIBCL status setting. Valid values are 
yes or no. 


Displays or modifies WEB Server status setting. Valid values 
are yes or no. 


Displays or modifies WEB GUI status setting. Valid values are 
yes or no. 


Displays or modifies Virtual Media status setting. Valid values 
are yes or no. 


Displays or modifies Remote Console status setting. Valid 
values are yes or no. 


Verbs 
e cd 
e version 


С] 
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e exit 

* show 

• set 

e oemHPE_loadSSHkey 
e oemHPE_resetHotkeys 


e vsp 


For example 


set /mapl/configl oemHPE mapenable-yes oemHPE timeout=30 


Specify one or more properties in the command line. If multiple properties are on the same command line, they must be 
separated by a space. 


For example: 
set /mapl/configl oemHPE computer lock-windows 


set /mapl/configl oemHPE computer lock-custom,l gui,l 


set /mapl/configl oemHPE computer lock-disabled 


For a complete list of cemHPE computer lock custom keys, see the iLO User Guide on the Hewlett Packard 
Enterprise website at: http://www.hpe.com/info/ilo/docs. Keys with a space must have the space replaced with an 
underscore. 


For example: 


= 


set /mapl/configl oemHPE computer lock-custom,SYS RQ 


iLO embedded health settings 


iLO embedded health commands enable you to display system embedded health information for fans, temperature 
sensors, voltage sensors, and power supplies. 


The iLO embedded health CLP settings are: 
* -a /systeml/fan* 
* -a /systeml/sensor* 


* -a /systeml/powersupply* 


Targets 
e Fan 
e Sensor 


e Powersupply 
e firmwarel 

• bootconfig1 
* logi 

e ledi 


e network1 
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e oemHPE у<р1 


e oemHPE ромег1 


e cpul 


e memory* 


e Slot* 


e swid* 


Table 17: Embedded Health Properties 


Description 


Property Access 
DeviceID Read 
ElementName Read 
OperationalStatus Read 
VariableSpeed Read 
DesiredSpeed 
p Read 
HealthState 
Read 
RateUnits 
Read 
CurrentReadin 
g Read 
SensorType 
Yp Read 
oemHPE CautionValue 
= Read 
oemHPE CriticalValue 
- Read 


Displays fan, sensor, or power supply label number 


Displays fan, sensor, or power supply location 


Displays fan, sensor, or power supply operational status 


Displays if the fan is operating at variable speed. 


Displays the current fan speed 


Displays the health status of the fan, sensor, or power supply 


Displays the reading units for temperature and voltage sensors 


Displays the current reading of sensor 


Displays the sensor type 


Displays temperature sensor caution value 


Displays temperature sensor critical value 


NOTE: All available embedded health properties from all targets are shown in Table 17: Embedded Health Properties. 
The actual properties returned depend on the command. 


For example 


The following command displays the system fan1 properties: show /systeml/fanl. 


/Sys 
Ta 
Pr 


teml/fanl 

rgets 

operties 
DeviceID-Fan 1 
ElementName=System 


OperationalStatus=Not Installed 


VariableSpeed=Yes 


L 
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DesiredSpeed-0 percent 
HealthState-Not Installed 


VRM power supplies are usually mapped to the sensor targets. 
The following command displays the VRM1 properties: show /systeml/sensor15. 


/systeml/sensori5 

Targets 

Properties 
DeviceID-15-P/S 1 Inlet 
ElementName-Power Supply 
OperationalStatus-Ok 
RateUnits-Celsius 
CurrentReading=30 
SensorType=Temperatur 
HealthState-Ok 
oemHPE CautionValue-Not Applicable 
oemHPE CriticalValue-Not Applicable 


Ба LE 


Other sensor targets show system temperatures. 
The following command displays one of the temperature zone properties: show /systeml/sensor38. 


/systeml/sensor38 

Targets 

Properties 
DeviceID=38-PCI 3 Zone 
ElementName-I/O Board 
OperationalStatus-Ok 
RateUnits-Celsius 
CurrentReading-28 
SensorType-Temperatur 
HealthState-Ok 


oemHPE CautionValue-90 
oemHPE CriticalValue-95 
SNMP settings 


SNMP settings commands enable you to view and modify SNMP settings. Table 18: SNMP Command Properties shows 
the SNMP command properties. SNMP settings are available at: 


/шар1/вптр1 
Targets 
None 


Properties 


NOTE: All SNMP command properties are Read/Write access. 
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Table 18: SNMP Command Properties 


Property 


Description 


accessinfo<n> 


readcom<n> 


trapcom<n> 


oemHPE iloalert 


oemHPE systemlocation 


= 


oemHPE systemcontact 


oemHPE systemrole 


- 


oemHPE systemroledetai 
l «n» 


oemHPE imdatalevel 


oemHPE coldstarttrap 


oemHPE trapsource 


Sets the SNMP trap destination address, where «n» is 1, 2, or 3. 


Displays or modifies SNMP read community address for when Agentless 
Management is enabled, where «n» is 1, 2, or 3. 


Displays or modifies SNMP trap community address, where «n» is 1, 2, or 3. 


Enables or disables iLO SNMP alerts. Boolean values accepted. 


Displays or modifies SNMP System Location when Agentless Management is 
enabled. 


Displays or modifies SNMP System Contact when Agentless Management is 
enabled. 


Displays or modifies SNMP System Role information when Agentless Management 
is enabled. 


Displays or modifies SNMP System Role detail when Agentless Management is 
enabled, where «n» is 1 to 5. 


Displays or modifies level of data returned to Insight Manager. Boolean values 
accepted. 


Displays or modifies the SNMP Cold Start Trap Broadcast. Boolean values accepted. 


Displays or modifies the SNMP trap source setting. 


NOTE: The command properties oemhp agentalert, oemhp_snmppassthru, oemhp imagenturl and 
oemhp_agentlessenable properties are deprecated in iLO 5. 


e Verbs 
с са 
° version 
о exit 
* show 
о set 


For example 


The following commands set various SNMP properties: 


С] 
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= 


* set /mapl/snmpl accessinfol-192.168.0.50 oemHPE imdatalevel=Enabled 


e set readcoml="publici" 
e set trapcoml-"trapcomml" 
* set oemHPE systemlocation-"HP Data Center, Hockley, TX" 


* сей oemHPE systemcontact-"Mr. System Administrator" 


* set oemHPE systemrole-"Brief Role Description [60 characters]" 


* set oemHPE systemroledetaill-"Extended role description [100 characters]" 


= 


e Showing multiple lines for oemHPE systemroledetail: 


9 set oemHPE systemroledetail2-"Extended role description" 


с show - Existing string in detaill has spaces added to meet 100 char limit. 


Specify one or more properties on the command line. If multiple properties are on the same command line, they must be 
separated by a space. 


License commands 


License commands enable you to display and modify the iLO license. Table 19: License Commands shows the License 
command properties. License commands are available at: 


/тар1 / 
Targets 
None 


Commands 


Table 19: License Commands 


Command Description 
— ——————————————————————————————————'—————————————Á á—r 


cd Changes the current directory 
show Displays license information 
set Changes the current license 


NOTE: For more information see the HPE iLO Licensing Guide at: 


http://www.hpe.com/support/iLOLicenseGuide-en 


For example 


* set /mapl license-1234500000678910000000001 


e show /mapl license 
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Directory commands 


Directory commands enable you to view and modify directory settings. Table 21: Directory Command Properties shows 
the Directory command properties. Directory command settings are available at: 


=, 


/mapl/oemHPE dircfgl 


Targets 


The Directory Command Targets are shown in Table 20: Directory Command Targets. 


Table 20: Directory Command Targets 


Target Description 
A ' WP — o! I] 


/mapl/oemHPE dircfgl/ Contains a load verb used to load the binary keytab file from a given URL. The 
oemHPE keytabl keytab file may be up to 1024 bytes in length. 
Properties 


Table 21: Directory Command Properties 


Property Access Description 
— ————————— ——— ——————————————— ''——————  -- 


- 


oemHPE dirauth Read/Write Enables or disables directory authentication. Valid settings are as 
follows: 


• extended schema 

Uses Hewlett Packard Enterprise extended schema 
* default schema 

Uses schema-free directories 
* disabled 


Directory-based authentication is disabled 


oemHPE localacct Read/Write Enables or disables local account authentication. This property can 
be disabled only if directory authentication is enabled. Boolean 
values accepted. 


oemHPE dirsrvaddr Read/Write Sets the directory server IP address or DNS name. The schema- 
free directory configuration requires a DNS name. 


- 


oemHPE dir generic lda Read/Write Displays or modifies iLO 5 generic ldap setting for directory 

p_enabled default schema. Valid values are yes and no. Directory 
authorization should be set to ‘Default Schema’ before this 
property can be modified. 


oemHPE ldapport Read/Write Sets the directory server port. 


Table Continued 
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Property 


Access 


Description 


oemHPE dirdn Read/Write Displays the LOM object distinguished name. This field is ignored 
when the schema-free directory configuration is used. 
oemHPE usercntxtl, Read/Write Displays the directory user login search context. This field is not 
2 ... (upto15) necessary when the schema-free directory configuration is used. 
oemHPE group(n) name Read/Write Displays security group distinguished name. Used within the 
schema-free directory configuration only. 
where n = 1..6 
oemHPE group(n) priv Read/Write The privileges associated with a group. Valid values are: 
where n = 1.6 * login 
* oemHPE rc 
* oemHPE power 
* oemHPE vm 
* config 
e admin 
oemHPE dir kerberos en  Read/Write Enables or disables Kerberos authentication. Boolean values are 
abled accepted. 
oemHPE dir kerberos kd  Read/Write Specifies the port number used to connect to the domain 
с port controller. The Kerberos port number is 88, but the domain 
controller can be configured for a different port number. 
oemHPE dir kerberos kd  Read/Write The location of the domain controller. The domain controller 
c address location is specified as an IP address or DNS name. 
oemHPE dir kerberos re  Read/Write Specifies the Kerberos realm for which the domain controller is 


alm 


configured. By convention, the Kerberos realm name for a given 
domain is the domain name converted to uppercase. 


For example 


e set /mapl/oemHPE dircfgl 


ту ту 


* set /mapl/oemHPE dircfgl oemHPE dirauth-default schema 


= 


oemHPE dirsrvaddr=adserv.demo.com 


Define additional groups using additional set commands. 


Specify one or more properties on the command line. If multiple properties are on the same command line, they must be 
separated by a space. 
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Virtual Media commands 


Access to the iLO virtual media feature is supported through the CLP. The virtual media subsystem is available at: / 


= 


mapl/oemHPE vml. 


For more information, see the HPE iLO 4 User Guide on the Hewlett Packard Enterprise website at: http://www.hpe.com/ 


support/ilo-docs. 
Targets 


Table 22: Virtual Media Command Targets 


Target Description 
ESE] 

/mapl/oemHPE vml/ Virtual floppy or key drive device 

floppydrl 

/mapl/oemHPE vml/cddrl Virtual CD-ROM device 


Table 23: Virtual Media Command Properties 


Property Access Description 
Eee 
oemHPE image Read/Write The image path and name for virtual media access. The value is a URL with a 


maximum length of 80 characters. 


oemHPE connect Read Displays if a virtual media device is already connected through the CLP or 
scriptable virtual media. 


oemHPE boot Read/Write Sets the boot flag. The valid values are: 


. Never 


Do not boot from the device. The value appears as Мо Boot. 


. Once 


Boot from the device only once. The value appears as Once. 


* Always 


Boot from the device each time the server is rebooted. The value is 
displayed as Always. 


e Connect 


= 


Connect the virtual media device. Sets oemHPE connect to Yes and 


- 


oemHPE boot to Always. 


e Disconnect 


= 


Disconnects the virtual media device and sets the oemHPE boot to 


No Boot. 
oemHPE wp Read/Write Enables or disables the write-protect flag. Boolean values accepted. 
vm applet Read/Write Displays whether an iLO virtual media device is connected through a remote 


console. Requires an iLO license. 


Image URL 
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Тһе oemhp image value is a URL. The URL, which is limited to 80 characters, specifies the location of the virtual media 
image file on an HTTP server. It uses the same format as the scriptable virtual media image location. 


URL example: 


protocol://username:passwordGühostname:port/filename 


e protocol—Mandatory (must be HTTP or HTTPS) 
e username :password—Optional field 

е” hostname—Mandatory field 

e port—Optional field 


e filename—Mandatory field 


The CLP performs only a cursory syntax verification of the URL value. You must visually verify that the URL is valid. 


For example 


= 


* set oemHPE image-http://imgserver.company.com/image/dosboot.bin 


= 


e set oemHPE image-http://john:abcl238imgserver.company.com/VMimage/ 
installDisk.iso 


Tasks 


• To insert a floppy image into the Virtual Floppy/USBKey, enter: 


= 


са /mapl/oemHPE vml1/floppydrl 
show 
set oemHP 
set oemHP 
show 


image=http://my.imageserver.com/floppyimg.bin 
boot=connect 


ІЗІ | ІЗІ 


This example executes the following commands: 


с Changes the current context to the floppy or key drive. 

с Shows the status to verify that the media is not in use. 

о Inserts the specified image into the drive. 

с Connects the media. The boot setting always connects automatically. 


e To eject a floppy or USB key image from the Virtual Floppy/USBKey, enter: 


са /mapl/oemHPE vml1/floppydrl 
set oemHPE boot-disconnect 


This example executes the following commands: 


с Changes the current context to the floppy or key drive. 


о Issues the disconnect command that disconnects the media and clears the oemHPE image. 


e To insert a CD-ROM image into the virtual CD-ROM, enter: 


са /mapl/oemHPE vml/cddr1 
show 
set oemHP 
set oemHP 
show 


image-http://my.imageserver.com/ISO/install diskl.iso 
boot=connect 


Gl | Gl 
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This example executes the following commands: 


с Changes the current context to the CD-ROM drive. 

с Shows the status to verify that the media is not in use. 

о Inserts the specified image into the drive. 

с Connects the media. The boot setting always connects automatically. 


e To eject a CD-ROM image from the Virtual CD-ROM, enter: 


са /mapl/oemHPE vml/cddr1 
set oemHPE boot-disconnect 


This example executes the following commands: 


с Changes the current context to the CD-ROM drive. 


о Issues the disconnect command that disconnects the media and clears the oemHPE image. 


• To insert a CD-ROM image and set for single boot, enter: 


са /mapl/oemHPE vml/cddr1 

set oemHPE image-http://my.imageserver.com/ISO/install diskl.iso 
set oemHPl t-connect 

set oemHPE boot-once 

show 


чї pi ІЗ 
с ы. 
о 
O 


This example executes the following commands: 


с Changes the current context to the CD-ROM drive. 
с Shows the status to verify that the media is not in use. 
о Inserts the specified image into the drive. 
с Connects the media. The boot setting always connects automatically. 
о Overrides the boot setting to once. 
e To eject a CD-ROM image from the virtual CD-ROM in a single command, ente:set /mapl/oemHPE vml/ 


cddrl oemHPE boot-disconnect. If you attempt to disconnect when the drive is not connected, you receive 
an error. 


Start and Reset commands 


Start and reset commands enable you to power on and reboot the server containing iLO or reboot just iLO itself. Table 
24: Start and Reset Commands shows the Start and Reset command properties. 


Table 24: Start and Reset Commands 


Command Description 


start Turns on server power 
stop Turns off server power 
reset hard Power cycles the server 


Table Continued 
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Соттапа Description 


reset Power cycles the server 


reset soft Warm boots the server 


Table 25: Manual Reset Command 


Property Access Description 


manual iLO reset Read/Write Allows a delay to iLO resets, which is useful when changing 
multiple properties. Valid values are yes (enabled) or no 
(disabled). When enabled, the iLO will reset only when a user logs 
out, is disconnected from iLO, or issues a ‘reset/map1’ command. 


For example 


The following commands are supported if the current target is: 


/systeml 
* Start 
. stop 


e reset hard 


The following commands are supported if the current target is: 


/mapl 


. reset 
e reset soft 


Set the status of the manual iLO reset property using the following commands in /тар1: 


• set /map1/ manual ilo, reset2yes 


e set /map1/ manual ilo reset2no 


Firmware commands 


Firmware commands enable you to display and modify the iLO firmware version. Table 26: Firmware Update Properties 
shows the Firmware Update properties. Firmware settings are available at: 


/mapl/firmwarel 
Targets 


No targets 
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Table 26: Firmware Update Properties 


Property Access Description 


version read Displays the current firmware version. 
date read Displays the release date of the current firmware version. 
name read Displays the iLO firmware name. 


Command format - source 

load -source URL [target] 

where URL is the URL of a firmware update image file on a web server. The URL is limited to 80 characters. 
URL example: 


protocol://username:password@hostname:port/filename 


e protocol—Mandatory field, must be НТТР or HTTPS. 
e username :password—Optional field 

е” hostname—Mandatory field 

e port—Optional field 

e filename—Mandatory field 


The CLP only performs a cursory syntax verification of the URL value. You must visually ensure that the URL is valid. For 
example: 


load /mapl/firmwarel -source http://imgserver.company.com/firmware/ 
iloFWimage.bin 


Command format - Target 
The [target] field is: 


/mapl/firmwarel-This field is optional if it is already the current target. 


NOTE: Firmware components loaded will be flashed onto the system, replacing the existing versions. If the firmware flash 
was successful, then the status tag of COMMAND COMPLETED will be shown. If iLO firmware was flashed, then a reset of 
iLO will occur. 


If an HPE Trusted Platform Module (TPM) is installed and enabled the load command must include the -ТРМ force 
option after the URL. Otherwise the command will fail. 


Ө! IMPORTANT: If a ТРМ is enabled, then upgrading without performing the proper OS encryption procedure will 
result in loss of access to your data. If you do not have your recovery key or have not suspended BitLocker do not 
flash iLO. 


Eventlog commands 


Eventlog commands enable you to display or delete the logs of both the system and iLO. Table 27: Eventlog Command 
Properties shows the Eventlog command properties. Eventlog settings are available at: 
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* /systeml/logl 
--ІМІ 
e /mapl/logl 


—iLO event log 


Targets 


record:1..n 


Where n is the total number of records. 


Table 27: Eventlog Command Properties 


Property Access 


Description 


number read 
severity read 
date read 
time read 
description read 


Displays the record number for the event. 


Displays the severity of the event. Severity levels areinformational, 
noncritical,critical,orunknown. 


Displays the event date. 


Displays the event time. 


Displays a description of the event. 


For example 


* show /systeml/logl 
—Displays the IML. 

e show /тар1/1091 
—Displays the iLO event log. 


e show /systeml/logl/recordn 


— Displays record n from the Integrated Management log. 


e show /mapl/logl/recordn 


— Displays record n from the iLO event log. 


e delete /systeml/logl 
—Deletes the IML. 
e delete /пар1/1о41 


—Deletes iLO event log. 


Blade commands 


Blade commands enable you to view and modify the values on a c-Class server. These values are available at: / 


Systeml/mapl/bladel. 


L 
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Table 28: Blade Command Targets 


Target Description 
E—— ————————————————A——————————————————————————————————————————————— il 


/mapl/bladel/rack Displays and modifies the blade rack settings. 


/mapl/bladel/rack/enclosure Displays and modifies the blade enclosure settings. 


Table 29: Blade Command Properties 


Property Access Description 
————————___ ЕЕЕ т е  ——e—r—Gc amm a c:c——Áseo—r—H—Á——————— — HH r[ 


bay number Read Displays the blade bay number. 
auto power Read Displays and modifies if the blade is enabled to automatically power 
up. 

ip address Read Displays the IP address 

mac address Read Displays the MAC address 

Sys health Read Displays the system health status 

Boot commands 

Boot commands enable you to modify the boot order of the system. Boot settings are available at: /system1/ 
bootconfigl. 
Targets 


bootsource<n>, where nis the total number of boot sources. 
The boot source targets and matching boot source values do not change. 


For systems with UEFI BIOS, the values for boot source аге: 


* bootsourcel: BootFmCd 


* bootsource2: BootFmDrive 
* bootsource3: BootFmUSBKey 


* bootsource4: BootFmNetwork 


For systems with legacy BIOS, the values for boot source are: 


* bootsourcel: BootFmCd 


* bootsource2: BootFmFloppy 


* bootsource3: BootFmDrive 


* bootsource4: BootFmUSBKey 


* bootsource5: BootFmNetwork 
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NOTE: If no bootable network device is enabled оп the system, the Boot FmNetwork boot source might not show up in 
the list of targets. 


Table 30: Boot Command Properties 


Property Access Description 


bootorder Read/write Configures the boot order for a given boot source 


For example 


When configuring bootorder, first list the current boot order by entering show -all /systeml/ 
bootconfigl.The following example output shows bootsource3 (BootfmDrive)is configured as the primary 
boot device, because it has a bootorder-l1: 


«/systeml/bootconfigl/bootsourcel»hpiLO-» show -all /systeml/bootconfigl 
/systeml/bootconfigl 
Targets 
bootsourcel 
bootsource2 
bootsource3 
bootsource4 
bootsource5 
Properties 
Verbs 
cd version exit show set 


/systeml/bootconfigl/bootsourcel 
Targets 
Properties 
bootorder=2 
bootdevice=BootFmCd 
Verbs 
cd version exit show set 


/systeml/bootconfigl/bootsource2 
Targets 
Properties 
bootorder=3 
bootdevice-BootFmFloppy 


Verbs 
cd version exit show set 


/systeml/bootconfigl/bootsource3 
Targets 
Properties 
bootorder=1 
bootdevice=BootFmDrive 
Verbs 
cd version exit show set 


/systeml/bootconfigl/bootsource4 


Targets 
Properties 
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bootorder-4 

bootdevice-BootFmUSBKey 
Verbs 

cd version exit show set 


/systeml/bootconfigl/bootsource5 
Targets 
Properties 
bootorder-5 
bootdevice-BootFmNetwork 
Verbs 
cd version exit show set 


To change the boot order, enter the following command: 


set /systeml/bootconfigl/bootsource«n» bootorder=<num> 


For example, to move bootsourcel (Boot fmCd) to be the primary boot device: 


</systeml/bootconfigl>hpiLO-> set bootsourcel bootorder-1 
Bootorder being set. 


bootsourcel=BootFmCd bootorder=1 
bootsource3=BootFmDisk bootorder=2 
bootsource2=BootFmFloppy bootorder=3 
bootsource4-BootFmUSBKey bootorder-4 


bootsource5=BootFmNetwork bootorder=5 
To display the boot order for a specific device, enter the following command: 
show /systeml/bootconfigl/bootsource<n> 
For example, to display the boot order for boot source lL: 
«/systeml/bootconfigl»hpiLO-» show /systeml/bootconfigl/bootsourcel 
/systeml/bootconfigl/bootsourcel 

Targets 

Properties 

bootorder=1 


Verbs 
cd version exit show set 


To display the current boot mode, enter the following command: 
show /systeml/bootconfigl/oemHPE bootmode 
To display the pending boot mode (which will be active on the next boot), enter the following command: 


= 


show /systeml/bootconfigl/oemHPE pendingbootmode 


UEFI enabled systems 


When configuring the UEFI bootorder, first list the current boot order by entering show -all /systeml/ 
bootconfigl1. For systems that support UEFI, the targets are listed in their respective boot order. The following 


example output shows oemHPE uefibootsourcel is configured as the primary boot device, because it has a 
bootorder=1 


/systeml/bootconfigl 
Targets 
oemHPE uefibootsourcel 
oemHPE uefibootsource2 
Properties 
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oemHPE bootmode-UEFI 

oemHPE secureboot-no 

oemHPE pendingbootmode-UEFI 
Verbs 

cd version exit show set 


- 


/systeml/bootconfigl/oemHPE uefibootsourcel 
Targets 
Properties 
bootorder-1 
oemHPE description-Windows Boot Manager 
Verbs 


cd version exit show set 


- 


/systeml/bootconfigl/oemHPE uefibootsource2 
Targets 
Properties 
bootorder-2 
oemHPE description-Embedded SATA Port 3 HDD : GBO160CAABV 


Verbs 
cd version exit show set 
To change the boot order for UEFI enabled systems, enter the following command: 
set /systeml/bootconfigl/oemHPE uefibootsource<n> bootorder=<num> . 
For example, to move ue£ibootsource2 to be the primary boot device: 


set /systeml/bootconfigl/oemHPE uefibootsource2 bootorder-1 


To display the boot order for a specific device, enter the following command: 


- 


show /systeml/bootconfigl/oemHPE uefibootsource«n»/bootorder 


To display the system secure boot setting for systems with UEFI enabled, enter the following command: 


show /systeml/bootconfigl/oemHPE secureboot 


LED commands 


LED commands are used to change the state of the UID light on the server. Table 31: LED Command Properties shows 
the LED command properties. LED settings are available at: 


/systeml/ledl 


Table 31: LED Command Properties 


Property Description 
m——O— ———ÓÁ—À————————————————————1 
start Turns the LED on. 
stop Turns the LED off. 
show Displays the LED status. 


For example 
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e show /system1/1led1 —bDisplays current LED status 
e start /systeml/ledi1-Turns LED on 


e stop /systeml/ledi--Turns LED off 

iLO CLI support 

Simple UID CLI commands are supported: 

e uid —Displays the current UID state on the server. 


* uid on—Turns the UID light on. 


* uid off —Turns the UID light off. 
The CLP format is supported as well: 


e show /system1/led1-—Verifies LED status 
e start /systeml/ledl —Turns LED on 


e stop /systeml/led1 —Turns LED off 


System properties and targets 


The properties and targets described in this section provide information about the server. System properties settings are 
available at: /systeml. 


Table 32: System Properties 


Property Access Description 
pe————————Á————————Á———— mmt 


name Read Displays the system name. 

number Read Displays the system serial number. 

oemHPE server name Read Displays the host server name string. This string can be up to 50 
characters in length, and requires the Configure iLO Settings privilege 
to change. 

oemHPE server fqdn Read Displays the host server fully qualified domain name. 

enabledstate Read Appears if the server is powered up. 

processor number Read Displays the number of logical processors in the system. 


For example 


* show /systeml 
* show /systeml name 


= 


* set /systeml oemHPE powerreg-auto 
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CPU properties 


The CPU property is a target of /system1 and displays information about the system processor. The properties аге 
available at: /system1/cpun, where n is the processor number. 


Table 33: System CPU Properties 


Property Access 


Description 


name Read 
status Read 
number cores Read 
active cores Read 
threads Read 
Speed Read 
memory technology Read 
cachememoryl Read 
cachememory2 Read 
cachememory3 Read 


Displays manufacturer information about the processor. 


Displays status information. 


Displays the number of processor cores. 


Displays the number of active logical processors within a CPU. 


Displays the number of logical threads within a CPU. 


Displays the processor speed. 


Displays the bit level technology of the memory. 


Displays the size of the processor level-1 cache. 


Displays the size of the processor level-2 cache. 


Displays the size of the processor level-3 cache. 


show /systeml/cpul 


/systeml/cpul 

Targets 

Properties 
name- Intel(R) Xeon(R) CPU 
status=OK 
number cores=8 
active cores-8 
threads=16 
speed=2 600MHz 


Е5-2670 0 @ 2.60GHz 


memory technology=64-bit Capable 


cachememoryl-256KB 
cachememory2-2048KB 
cachememory3-20480KB 


System memory properties 


The memory property displays information about the system memory. 


The properties are available at: / syst em1 /memoryn, where n is the memory DIMM number. 
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Table 34: System Memory Properties 


Property Access Description 
l—— — ——— Á——X— ——7—-——X—————— M -Y—K——————————————— NNNM 
size Read Displays the memory size. 
frequency Read Displays the memory speed. 
location Read Displays the location of the memory. 
technology Read Displays information about the system memory technology type. 


System slot properties 
The Slot property displays information about the system slots. 


The properties are available at: /system1/slotn, where п is the slot number. 
Table 35: System Slot Properties 


Property Access Description 
TEH 


type Read Displays the slot type. 
width Read Displays the slot width. 
name Read Display the slot name. 


System firmware properties 
The Firmware property displays information about the system ROM. 
The properties are available at: 


/system1/firmware1 


Table 36: System Firmware Properties 


Property Access Description 
F 

version Read Displays the version of the system ROM. 

date Read Displays the date the system ROM. 


For example: 


show /systeml/cpul —Displays information оп опе CPU. 


e show /systeml/memoryl—Displays information on one memory slot. 
e show /system1/slot1—Displays information on one slot. 


e show /systeml1/firmwarel-Displays information about system ROM. For example: 


/systeml/firmwarel 
Targets 
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Properties 
version-U33 
date-12/04/2016 

Verbs 
cd version exit 


System power properties 


show load 


TheoemHPE powerl property displays information about the system power. 


= 


The properties are available at: /systeml/oemHPE powerl 


Table 37: oemHPE power1 properties 


Target 


Description 


oemHPE powerreg 


oemHPE pwrcap 


oemHPE PresentPower 


oemHPE AvgPower 


- 


oemHPE MaxPower 


oemHPE MinPower 


E powersupplyca 
pacity 


oemHPE servermaxpowe 


oemHPE serverminpowe 


warning type 


warning threshold 


warning duration 


Displays and modifies the Power Regulator for ProLiant state. Valid values are 
dynamic, max, min, or os. 


Displays and modifies the server power cap setting (watts). A value of zero indicates 
that power capping is disabled. The value must be an integer cap value that is greater 


= 


than or equal їо оелНРЕ serverminpower. It must be less than or equal to 


= 


oemHPE powersupplycapacity. 


Displays the average power reading from the last sample. 


Displays the average power reading from the past 24 hours. 


Displays the greatest peak power reading from the past 24 hours. 


Displays the minimum average power reading from the past 24 hours. 


Displays the total power supply capacity in Watts. 


Displays the maximum server power capacity in Watts. 


Displays the minimum server power capacity in Watts. 


Displays and modifies the warning type. 


Displays and modifies the warning threshold for power consumption. 


Displays and modifies the duration the power threshold must be exceeded before a 
warning is generated. 


Table Continued 


SMASH CLP Scripting Language 70 


Target Description 


EE 
oemHPE power micro v 


Displays the firmware version number for the Power Micro Controller. 


oemHPE auto pwr . m i . : 
m = Displays and modifies the Server Automatic Power On setting. Valid values аге оп, 15, 


30, 45, 60, random, restore, and off. On turns on automatic power on with minimum 
delay. Time-delayed automatic power on settings or a random time delay can be 
enabled (time starts after iLO boots). Restore restores the last power state. Off turns 
off automatic power on. 


The Restore option is supported on nonblade servers only. 


The 15, 30, 45, and 60 second delay values are not supported on c-Class blade 
servers or Synergy compute modules. These server types are managed by external 
products such as OA, HPE OneView, or the Frame Link Module. iLO will try to power 
on the servers based on the configured power-on delay setting, but external factors 
might affect the actual startup time. 


Verbs 

e cd 

e version 

e exit 

e show 

. set 

For example: 


=, 


* show /systeml/oemHPE powerl oemHPE powerreg 


U 
U 
Tj 


e set /systeml/oemHPE powerl oemHPE ромекгед-<аупатіс | пах | тіп | ов> 


9 
9 


* show /systeml/oemHPE powerl oemHPE pwrcap 


e set /systeml/oemHPE powerl oemHPE pwrcap-0 


* show /systeml/oemHPE powerl oemHPE power micro ver 


Other commands 
Other commands include the following: 
start /systeml/oemHPE vspl 


Starts a virtual serial port session. Press Esc C to return to the CLI session. This includes a single property, 
enabled state, which must be set to either enabled or disabled. 


nmi server 


Generates and sends an NMI to the server. It is limited to users with the Virtual Power and Reset privilege. 
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RIBCL XML Scripting Language 


Overview of the RIBCL 


The Remote Insight Board Command Language (RIBCL) enables you to write XML scripts to configure and manage iLO 5 
configuration settings, user accounts, directory settings, server settings, and SSO settings. 


Download the sample scripts from the Hewlett Packard Enterprise website at http://www.hpe.com/info/ilo. Scroll down 
to the Resources section, and then click Tools. Choose your language and operating system, and the sample scripts 
display for the appropriate operating systems, along with other available software, in the Software - Lights-Out 
Management section. 


Before using the XML sample scripts downloaded from the Hewlett Packard Enterprise website, read the firmware support 
information in each sample script to tailor the script for the intended firmware and version. 


When writing your XML scripts, write comments in the command as needed. If a comment falls in the command line, an 
error message is generated. Unless otherwise specified, examples in this guide are specifically for iLO 5 firmware version 
1.10 and later. 


This section describes the XML commands and their parameters common to most LOM products and servers. For more 
information about the ProLiant BL c-Class server and rack XML commands, see the iLO User Guide on the Hewlett 
Packard Enterprise website at: http://www.hpe.com/info/ilo/docs. 


XML headers 


The following XML header must be present in every script, which ensures an XML connection and not an HTTP 
connection: 


<?xml version="1.0"?> 


Two other headers can be added in RIBCL scripts: 


e «?ilo entity-processing="standard"?> 


Added to a RIBCL script or in a response, this header takes the following entities in a quoted string and changes them 
to symbol equivalents: 


Table 38: Accepted script entities 


Entity Symbol 
ЕСС“ 

&lt; « 

&gt; > 

&amp; & 

&apos; H 

&quot; т 


e <?xmlilo output-format-"xml"?» 
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This header will accept entities (see Table 38: Accepted script entities) along with changing output to minimal 
response. 
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Table 39: XMLILO output (GET FW VERSION) 


Output with header 


Output without header 


#>perl locfg.pl -s «ilo ip» -f get fw version.xml -u admin -p admin123 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 


«GET FW VERSION 
FIRMWARE VERSION - "1.20" 
FIRMWARE DATE - "Feb 5 2018" 
MANAGEMENT PROCESSOR - "ILOS" 

LICENSE TYPE = "iLO Advanced" 
/> 
«/RIBCL» 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 
/> 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 
<RESPONSE 
STATUS="0x0000" 
MESSAGE='No error' 
/> 
</RIBCL> 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE-'No error' 
/> 
«/RIBCL» 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
<RESPONSE 
STATUS="0x0000" 
MESSAGE='No error' 
/> 
«GET FW VERSION 
FIRMWARE VERSION - "1.20" 
FIRMWARE DATE - "Feb 5 2018" 
MANAGEMENT PROCESSOR - "iLO5" 
LICENSE TYPE - "iLO Advanced" 
{> 
</RIBCL> 


E 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 
<RESPONSE 
STATUS="0x0000" 
MESSAGE='No error' 
/> 
«/RIBCL» 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 
«RESPONSE 
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Output with header Output without header 
[oca —————— ————PRa.—Q——MM ———M——á—À————á——Á——Á— ———À——————À———— — À—  —sn|[ 
STATUS-"0x0000" 
MESSAGE='No error' 
/> 
</RIBCL> 


Data types 


The three data types allowed in the parameter are: 


• String 
e Specific string 


e Boolean string 


String 
A string is any text enclosed in quotes. It can include spaces, numbers, or any printable character. A string must start with 
either a double or single quote, and it must end with the same type of quote. The string can contain a quote if it is 
different from the string delimiter quotes. 
For example, if a string starts with a double quote, a single quote can be used within the string and the string must be 
closed with a double quote. 
NOTE: 
Unsupported Microsoft Windows quote characters 
Support for Windows-specific smart-quotes (“” and ‘’) as content delimiters in XML is being phased out. Be sure to 
replace any smart-quote characters in your script with normal double or single quotes ("апа '). 

Specific string 


A specific string is one that is required to contain certain characters. In general, you have a choice of words that are 
accepted as correct syntax and all other words produce an error. 
Boolean string 


A Boolean string is a specific string that specifies a yes or no condition. Acceptable Boolean strings are yes, no, t rue, 
false,y,n,t, Ё, 1, and 0. These strings аге not case sensitive. 


Response definitions 


Every command that is sent to iLO generates a response. The response indicates whether the command succeeded or 
failed. Some commands generate additional information. The additional information appears in execution sequence, 
provided no errors occurred. 


For example: 


«RESPONSE 
STATUS-"0x0001" 
MSG-"There has been a sever rror."/» 
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е” RESPONSE—This tag name indicates that iLO is sending a response їо the previous commands back to the client 
application to indicate the success or failure of the commands that have been sent to iLO. 


e STATUS—This parameter contains an error number. The number 0x0000 indicates that no error exists. 


e MSG—This element contains a message describing the error that happened. If there is no error, the Мо error 
message appears. 


RIBCL 


This command is used to start and end a RIBCL session. You can use it only once to start a RIBCL session, and it must be 
the first command to display in the script. The RIBCL tags are required to mark the beginning and the end of the RIBCL 
document. 


For example: 


<RIBCL VERSION="2.0"> 
</RIBCL> 


RIBCL parameters 


VERSION is a string that indicates the version of the RIBCL that the client application is expecting to use. The VERSION 
string is compared to the version of the RIBCL that is expected, and an error message is returned if the first number of the 
string and the version (major version) do not match. The preferred value for the VERSION parameter is 2.X. For example, 
if the string is 2.20 and the expected major version number is 2, no errors message is sent. However, if the VERSION 
string is 1.X and the expected version is 2, then the different versions may introduce compatibility issues. If there is a 
major version mismatch, the following inform message is sent: 


Тһе RIBCL version is incorrect. The correct version is <Х.ХХ> or later. 


Update the RIBCL script to be compatible with the current RIBCL version. 


RIBCL runtime errors 


The possible RIBCL error messages include: 


e Version must not be blank. 


e The RIBCL version is incorrect. The correct version is X.XX or later. 


Combining multiple commands in one RIBCL script 


To combine multiple commands іп а single RIBCL script, enclose each command in a top level *_INFO tag. One of the 
following top level tags must enclose each command used, or accidental changes to your configuration can result: 


e USER INFO 
e ВІВ INFO 
* DIR INFO 


е BLADESYSTEM INFO 
* SERVER INFO 


• 550 INFO 


See the examples below for contrasting script samples. 
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Incorrectly combined script 


<RIBCL VERSION="2.0"> 

<LOGIN USER_LOGIN="adminname" PASSWORD="password"> 
<КІВ INFO MODE="write"> 

«MOD GLOBAL SETTINGS» 
«MIN PASSWORD value="5"/> 
«/MOD GLOBAL SETTINGS» 
«MOD NETWORK SETTINGS» 

<DHCP_ DNS SERVER value="No"/> 
<DHCP_ WINS SERVER value="No"/> 


<DHCP STATIC ROUTE value="No"/> 


T 


</MOD NETWORK SETTINGS» 
«/RIB INFO» 
«USER INFO MODE-"write"» 

«ADD USER USER NAME-"admin" USER LOGIN-"admin" PASSWORD="admin"> 

«ADMIN PRIV value-"Yes" /> 
<REMOTE CONS PRIV value-"Yes" /» 
«RESET SERVER PRIV value-"Yes" /> 
«VIRTUAL MEDIA PRIV value-"Yes" /» 
«CONFIG ILO PRIV value-"Yes" /> 

«/ADD USER» 

«DELETE USER USER LOGIN-"Administrator" /» 

«/USER INFO» 


Correctly combined script 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE="write"> 
<MOD_GLOBAL SETTINGS> 
«MIN PASSWORD value="5"/> 
«/MOD GLOBAL SETTINGS» 
«/RIB INFO» 
<КІВ INFO MODE="write"> 
«MOD NETWORK SETTINGS» 
«DHCP DNS SERVER value="No"/> 
«DHCP WINS SERVER value="No"/> 
«DHCP STATIC ROUTE value="No"/> 
«/MOD NETWORK SETTINGS» 


«/RIB INFO» 
«USER INFO MODE="write"> 
<Арр USER USER NAME-"admin" USER LOGIN-"admin" PASSWORD="admin"> 

«ADMIN PRIV value="Yes" /> 
«REMOTE CONS PRIV value-"Yes" /» 
«RESET SERVER PRIV value-"Yes" /> 
«VIRTUAL MEDIA PRIV value-"Yes" /» 
«CONFIG ILO PRIV value-"Yes" /» 


<USER INFO MODE="write"> 
«DELETE USER USER LOGIN-"Administrator" /> 
</05ЕК INFO» 
«/LOGIN» 
«/RIBCL» 


Tj 
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LOGIN 


The LOGIN command provides the information that is used to authenticate the user whose permission level is used when 
performing RIBCL actions. The specified user must have a valid iLO account to execute RIBCL commands. The user 
privileges are verified against the required privilege for a particular command, and an error is returned if the privilege level 
does not match. 


For example: 


«LOGIN USER LOGIN-"username" PASSWORD="password"> 
</LOGIN> 


Alternatively, the HPQLOCFG utility allows you to specify the login information as parameters on the command line using 
switches: 


hpqlocfg -u username -p password 


LOGIN parameters 


USER LOGIN is the login name of the user account. This parameter is case sensitive and must not be blank. The maximum 
length of the login name is 127 characters. 


PASSWORD is the password associated with the user. This parameter is case sensitive and can be a combination of any 
printable characters. The maximum length of the password is 65 characters. 


LOGIN runtime errors 


Possible runtime error messages include: 


* User login name was not found. 


* Logged-in user does not have required privilege for this command. 


USER. INFO 


The USER INFO command can only appear within a LOGIN command block. When the command is parsed, it reads the 
local user information database into memory and prepares to edit it. Only commands that are USER INFO type commands 
are valid inside the USER INFO command block. The USER INFO command generates a response that indicates to the 
host application whether the database was successfully read or not. If the database is open for writing by another 
application, then this call fails. 


USER INFO requires the MODE parameter with a value of read or write. MODE is a specific string parameter with a 
maximum length of 10 characters that specifies what you intend to do with the information. 


Write mode enables both reading and writing of iLO information. Read mode prevents modification of the iLO information. 


For example: 


^ 
а 
о 
Б 


ER INFO MODE="write"> 
€ USER INFO commands .... 
«/USER INFO» 


ADD USER 


The ADD. USER command is used їо add a local user account. The USER. NAME and USER LOGIN parameters must not 
exist in the current user database. Use the MOD USER command to change existing user information. For this command 
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to parse correctly, the command must appear within а USER INFO command block, and USER INFO MODE must be set to 
write. The user must have the Administer User Accounts privilege. 


All of the attributes that pertain to the user are set using the following parameters: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«USER INFO MODE-"write"» 
<ADD USER 
USER NAME-"User" 
OGIN-"username" 
PASSWORD="password"> 
ADMIN PRIV value ="N"/> 
EMOTE CONS PRIV value ="Y"/> 
ESET SERVER PRIV value -"N"/» 
VIRTUAL MEDIA PRIV value ="N"/> 
CONFIG ILO PRIV value-"Y"/» 
«/ADD USER» 
«/USER ІМЕО> 
</LOGIN> 
</RIBCL> 


а 
о 

1] 
"d 


T 


NOTE: ADD_USER has not been enhanced to support the extended user privileges available from the iLO 5 web interface. 
For more information about setting user privileges in iLO 5, see the HPE iLO 5 User Guide at http://www.hpe.com/ 


support/ilo-docs. 


ADD USER parameters 


USER NAME is the actual name of the user. This parameter can be a combination of any printable characters up to a 
maximum length of 39 characters. This parameter is not case-sensitive and must not be blank. 


USER LOGIN is the name used to gain access to the respective iLO. This parameter can be a combination of any printable 
characters up to a maximum length of 39 characters. This parameter is not case-sensitive and must not be blank. 


PASSWORD is the password associated with the user. This parameter is case-sensitive and can be a combination of any 
printable characters. The length is user-defined and can be a minimum of zero characters and a maximum of 39 
characters. The minimum length is defined in the iLO Global Settings and has a default value of eight characters. 


ADMIN. PRIV is a Boolean parameter that enables the user to administer user accounts. This parameter is optional, and 
the Boolean string must be set to Yes if the user is allowed this privilege. The user can modify account settings, modify 
other user account settings, add users, and delete users. Omitting this parameter prevents the user from adding, deleting, 
or configuring user accounts. 


REMOTE CONS PRIV is a Boolean parameter that gives permission for the user to access the Remote Console 
functionality. This parameter is optional, and the Boolean string must be set to Yes if the user is allowed this privilege. If 
this parameter is used, the Boolean string value must not be left blank. Omitting this parameter denies the user access to 
Remote Console functionality. 


RESET SERVER PRIV is a Boolean parameter that gives the user permission to remotely manipulate the server power 
setting. This parameter is optional, and the Boolean string must be set to Yes if the user is allowed this privilege. If this 
parameter is used, the Boolean string value must not be left blank. Omitting this parameter prevents the user from 
manipulating the server power settings. 


VIRTUAL. MEDIA PRIV is a Boolean parameter that gives the user permission to access the virtual media functionality. 
This parameter is optional, and the Boolean string must be set to Yes if the user is allowed this privilege. If this parameter 
is used, the Boolean string value must not be left blank. Omitting this parameter denies the user the Virtual Media 
privilege. 
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CONFIG ILO PRIV is a Boolean parameter that enables the user to configure iLO settings. This privilege includes network 
settings, global settings, Insight Manager settings, and SNMP settings. This parameter is optional, and the Boolean string 
must be set to Yes if the user is allowed this privilege. If this parameter is used, the Boolean string value must not be 
blank. Omitting this parameter prevents the user from manipulating the current iLO configuration. 


ADD USER runtime errors 


Possible ADD USER error messages include: 


* Logi 
* Pass 
* Pass 
e User 
e Cann 
e User 

this 
e User 
e User 
e Bool 


n name is too long. 
word is too short. 
word is too long. 


table is full. No room for new user. 


ot add user. The user name already exists. 


information is open for read-only access. 


operation. 
name cannot be blank. 
login ID cannot be blank. 


ean value not specified. 


Write access is required for 


* User does not have correct privilege for action. ADMIN PRIV required. 


DELETE USE 


The DELETE USER command is used to remove an existing local user account. The USER LOGIN parameter must exist in 
the current user database. For this command to parse correctly, the command must appear within a USER. INFO command 
block, and USER. INFO MODE must be set to write. The user must have the Administer User Accounts privilege. 


For example: 
<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«USER INFO MODE-"write"» 
«DELETE USER USER LOGIN-"username"/» 
«/USER INFO» 
</LOGIN> 
</RIBCL> 


DELETE_USER parameter 


USER_LOGIN is the login name of the user account. This parameter is not case sensitive, and must not be blank. 


DELETE_USER runtime errors 


Possible DELETE_USER errors include: 


* User information is open for read-only access. Write access is required for 


this 


operation. 


* Cannot delete user information for currently logged in user. 


Cc} 


RIBCL XML Scripting Language 


80 


* User login name was not found. 
* User login name must not be left blank. 


* User does not have correct privilege for action. ADMIN PRIV required. 


GET USER 


The GET USER command returns local user information, excluding the password. The USER LOGIN parameter must exist 
in the current user database. For this command to parse correctly, the command must appear within a USER INFO 
command block, and USER INFO MODE can be read or write. 


For example: 


<RIBCL VERSION="2.0"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<USER_ INFO MODE="read"> 
«GET USER USER_LOGIN="username"/> 
«/USER INFO» 
«/LOGIN» 
</RIBCL> 


T 


GET_USER parameter 


USER_LOGIN is the login name of the user account. This parameter is case sensitive and must not be blank. 


GET_USER runtime errors 


Possible GET_USER error messages include: 


e User login name must not be blank. 


* User login name was not found. 


GET_USER return messages 


A possible GET_USER return message includes: 


RESPONSE STATUS="0x0000" MSG="No Errors"/> 

GET USER USER NAME-"Admin User" USER LOGIN- "username" 
_PRIV="N" 

EMOTE CONS PRIV-"Y" 

ESET SERVER PRIV-"N" 

VIRTUAL MEDIA PRIV-"N" 

CONFIG ILO PRIV value -"No"/» 


AND PA A 
Jg 
X 
H 
z 
А5 


MOD USER 


The MOD USER command is used to modify an existing local user account. The USER LOGIN parameter must exist in the 
current user database. For this command to parse correctly, the command must appear within a USER INFO command 
block, and USER INFO MODE must be set to write. The user must have the Administer User Accounts privilege. Otherwise, 
the user can only modify their individual account password. 
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Еог ехатріе: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«USER INFO MODE-"write"» 
«MOD USER USER LOGIN-"username"» 
USER NAME value="displayname"/> 
USER LOGIN value="newusername"/> 


т 


X 


D 

< 

< EN 

<PASSWORD value="newpassword"/> 
<ADMIN PRIV value="Yes"/> 
< 
< 
< 
< 


REMOTE CONS PRIV value="No"/> 
R 


ESET SERVER PRIV value="Yes"/> 
VIRTUAL MEDIA PRIV value="Yes"/> 
CONFIG ILO PRIV value="Yes"/> 
</MOD_USER> 
</USER_INFO> 
</LOGIN> 
</RIBCL> 


I 


Reset administrator password example: 


<КІВСІ. VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«USER INFO MODE-"write"» 
ІК LOGIN-"Administrator"» 


E 


<MOD_USER US 
<PASSWORD value="password"/> 
</MOD_USER> 
</USER_INFO> 
</LOGIN> 
</RIBCL> 


T 


Change password example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«USER INFO MODE-"write"» 
ІК LOGIN-"username"» 


«MOD USER US 
«PASSWORD value="newpassword"/> 
«/MOD USER» 

«/USER INFO» 

</LOGIN> 
</RIBCL> 


I 


NOTE: MOD USER has not been enhanced to support the extended user privileges available from the iLO 5 web interface. 
For more information about setting user privileges іп iLO 5, see the HPE iLO 5 User Guide in the HPE Information Library 
at http://www.hpe.com/info/ilo/docs. 


MOD USER parameters 


If the following parameters are not specified, then the parameter value for the specified user is preserved. 


MOD USER USER LOGIN is the login name of the user to be changed. This parameter can be a combination of any 
printable characters up to a maximum length of 39 characters. This parameter is not case sensitive and must not be left 
blank. 
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USER МАМЕ is the actual name of the user to be modified. This parameter is not case sensitive, can be any valid string, 
and has a maximum length of 39 characters. This string is used for display only and must not be left blank. 


PASSWORD is the password associated with the user. This parameter is case sensitive and can be a combination of any 
printable characters. The length is user defined and can be a minimum of zero characters and a maximum of 39 
characters. The minimum length is defined in the iLO Global Settings and has a default value of eight characters. 


ADMIN. PRIV is a Boolean parameter that enables the user to administer user accounts. The user can modify their account 
settings, modify other user account settings, add users, and delete users. Omitting this parameter prevents the user from 
adding, deleting, or configuring user accounts. 


REMOTE CONS PRIV is a Boolean parameter that gives permission for the user to access the Remote Console 
functionality. This parameter is optional, and the Boolean string must be set to Yes if the user is allowed this privilege. If 
this parameter is used, the Boolean string value must not be left blank. Omitting this parameter denies the user access to 
Remote Console functionality. 


RESET SERVER PRIV is a Boolean parameter that gives the user permission to remotely manipulate the server power 
setting. This parameter is optional, and the Boolean string must be set to Yes if the user is allowed this privilege. If this 
parameter is used, the Boolean string value must not be left blank. Omitting this parameter prevents the user from 
manipulating the server power settings. 


VIRTUAL. MEDIA PRIV is a Boolean parameter that gives the user permission to access the virtual media functionality. 
This parameter is optional, and the Boolean string must be set to Yes if the user is allowed this privilege. If this parameter 
is used, the Boolean string value must not be left blank. Omitting this parameter denies the user The Virtual Media 
privilege. 


CONFIG ILO PRIV is a Boolean parameter that enables the user to configure iLO settings. This privilege includes network 
settings, global settings, Insight Manager settings, and SNMP settings. This parameter is optional, and the Boolean string 
must be set to Yes if the user is allowed this privilege. If this parameter is used, the Boolean string value must not be left 
blank. Omitting this parameter prevents the user from manipulating the current iLO configuration. 


MOD USER runtime errors 


Possible MOD. USER error messages include: 


* Login name is too long. 
* Password is too short. 
* Password is too long. 


* User information is open for read-only access. Write access is required for 
this operation. 


* User login name must not be blank. 
* Cannot modify user information for currently logged user. 


* User does not have correct privilege for action. ADMIN PRIV required. 


GET ALL USERS 


Тһе GET ALL. USERS command returns all USER, LOGIN parameters in the user database. For this command to parse 
correctly, the command must appear within a USER. INFO command block, and USER INFO MODE can Бе in read or write. 
The user must have the Administer User Accounts privilege to retrieve all user accounts. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«USER INFO MODE-"read"» 
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«GET AL 


L US] 


</USER_INFO> 


</LOGIN> 
</RIBCL> 


ERS /> 


GET_ALL_USERS parameters 


None 


GET_ALL_USERS return messages 


A possible GET ALL USERS return message is: 


A possible unsuccessful request is: 


«RESPONSE 


STATUS-"0x0023" M 
privilege for action. 
ADMIN PRIV required.'/» 


GET АШ. USER INFO 


The GET ALL USER INFO command returns all local user information in the user database, excluding passwords. For this 
command to parse correctly, the command must appear within a USER. INFO command block, and USER. INFO MODE сап 
be in read or write. The user must have the Administer User Accounts privilege to execute this command. 


For example: 


<RIBCL VERSION="2.0"> 


<LOGIN US 
<USER_INFO MOD 
«GET ALL 051 
«/USER INFO» 
«/LOGIN» 
</RIBCL> 


E-"read"» 


ER INFO /» 


E-'No Error'/» 


«RESPONSE STATUS-"0x0000" MESSAG 
«GET ALL USERS» 

«USER LOGIN VALUE-"username"/» 
«USER LOGIN VALUE-"user2"/» 
«USER LOGIN VALUE-"user3"/» 
«USER LOGIN VALUE="user4"/> 
«USER LOGIN VALUE-"user5"/» 
«USER LOGIN VALUE="user6"/> 
«USER LOGIN VALUE="user7"/> 
«USER LOGIN VALUE-"user8"/» 
«USER LOGIN VALUE-"user9"/» 
«USER LOGIN VALUE-"userl0"/» 
«USER LOGIN VALUE=""/> 

«USER LOGIN VALUE=""/> 
«/GET ALL USERS» 


ESSAG 


E-'User does NOT have correct 


ER LOGIN-"adminname" PASSWORD="password"> 
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NOTE: GET ALL USER INFO has not been enhanced to support the extended user privileges available from the iLO 5 
web interface. For more information about setting user privileges in iLO 5, see the HPE iLO 5 User Guide in the HPE 
Information LIbrary at http://www.hpe.com/support/ilo-docs. 


GET. ALL USER INFO parameters 


None 


СЕТ ALL USER INFO return messages 


A possible GET ALL USER INFO return message is: 


«GET ALL USER INFO/» 
«GET USER 
USER NAME-"Admin" 
USER LOGIN-"Admin" 
ADMIN PRIV-"Y" 

CONFIG RILO PRIV-"Y" 
LOGIN PRIV-"Y" 
R 
R 


EMOTE CONS PRIV-"Y" 


ESET SERVER PRIV-"Y" 
VIRTUAL MEDIA PRIV-"Y" 


T 


The same information will be repeated for all the users. 
«/GET ALL USER INFO» 


A possible unsuccessful request is: 


<RESPONSE STATUS="0x0023" MESSAGE-'User does NOT have correct 
privilege for action. 
ADMIN PRIV required.'/» 


РІВ INFO 


The RIB. INFO command can only appear within a LOGIN command block. When the command is parsed, it reads the iLO 
configuration information database into memory and prepares to edit it. Only commands that are БІВ INFO type 
commands are valid inside the RIB INFO command block. The RIB INFO command generates a response that indicates to 
the host application whether the database was successfully read or not. If the database is open for writing by another 
application, then this call fails. 


RIB INFO requires the MODE parameter with a value of read or write. MODE is a specific string parameter with a 
maximum length of 10 characters that specifies what you intend to do with the information. 


Write mode enables both reading and writing of iLO information. Read mode prevents modification of the iLO information. 


For example: 


<КІВ INFO MODE="write"> 
uds RIB INFO commands ... 
«/RIB INFO» 
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Clear iLO event log example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="write"> 
<CLEAR_EVENTLOG/> 
«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


RESET_RIB 


The RESET_RIB command is used to reset iLO. For this command to parse correctly, the command must appear within a 


RIB INFO command block, and RIB INFO MODE can be set to read or write. The user must have the Configure iLO 
Settings privilege to execute this command. 


For example: 


<RIBCL VERSION="2.0"> 
<LOGIN USER LOGIN-"Admin" PASSWORD="Password"> 
<КІВ INFO MODE = "write"» 
«RESET КІВ/> 
«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


RESET_RIB parameters 


None 


RESET_RIB runtime errors 
The possible RESET_RIB error message include: 


User does not have correct privilege for action. CONFIG ILO PRIV required. 


GET_EVENT_LOG 


The GET_EVENT_LOG command retrieves the iLO Event Log or the Integrated Management log, depending on the 
context of the command. For this command to parse correctly, the command must appear within a RIB_INFO or 
SERVER_INFO command block. To retrieve the iLO Event Log, use the БІВ ІМЕО command block. To retrieve the 
Integrated Management log use, the SERVER_INFO command block. 


For example: 


e ПО Event Log example: 


<RIBCL version="2.0"> 

<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<RIB INFO MODE="READ"> 

«GET EVENT LOG /> 

«/RIB INFO» 

</LOGIN> 


Cd RIBCL XML Scripting Language 


86 


</RIBCL> 


e Integrated Management log example: 


<RIBCL version="2.0"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="READ"> 
«GET EVENT LOG /» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


GET_EVENT_LOG parameters 


None 


GET_EVENT_LOG runtime errors 
GET_EVENT_LOG returns a runtime error if it is not called from within the БІВ ІМЕО or SERVER_INFO block. 


For example: 


<RIBCL VERSION="2.0"> 


<RESPONSE STATUS="0x0001" MESSAGE='Syntax error: Line #3: syntax error near ">" 
in the line: " GET EVENT LOG >"'/> 
</RIBCL> 


GET_EVENT_LOG return messages 


The response includes all of the events recorded, in the order that they occurred. Events are not sorted by severity or 
other criteria. Each event includes a common set of attributes: 


e SEVERITY indicates the importance of the error and how it might impact server or iLO availability: 


с FAILED indicates a problem or component failure that might impact operational time if it is not addressed. 


с CAUTION indicates an event that is not expected during normal system operation. This might not indicate а 
platform issue. 


с DEGRADED indicates the device or subsystem is operating at a reduced capacity. 
о REPAIRED indicates that an event or component failure has been addressed. 


о INFORMATIONAL indicates that something noteworthy occurred, but operational time is not impacted. 


* CLASS indicates the subsystem that generated the event, and can include iLO, environment, power, system error, rack 
infrastructure, and more. 


e LAST UPDATE indicates the most recent time this event was modified. 
* INITIAL UPDATE indicates when this event first occurred. 

e COUNT indicates the number of times a duplicate event happened. 

e DESCRIPTION indicates the nature of the event and all recorded details. 


е EVENT CODE is a unique identifier for an event within a given event class displayed in hexadecimal format. 
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The following response is typical of the data returned from the iLO Event Log: 


«EVENT LOG DESCRIPTION-"iLO 5 Event Log"» 
«EVENT 
SEVERITY="Informational" 
CLASS="iLO 5" 
LAST UPDATE-"01/20/2017 07:33:00" 
INITIAL UPDATE-"01/20/2017 07:33:00" 
COUNT="1" 
DESCRIPTION="Event log cleared by: admin." 
EVENT CODE="0x0087" 

/> 
</EVENT LOG> 


The following response is typical of the data returned from the Integrated Management Log: 


<EVENT LOG DESCRIPTION="Integrated Management Log"> 
<EVENT 

SEVERITY="Informational" 

CLASS="Maintenance" 

LAST UPDATE="11/14/2016 20:18:28" 

INITIAL UPDATE="11/14/2016 2020228" 

COUNT="1" 

DESCRIPTION="IML Cleared (iLO 5 user: Administrator)" 
EVENT CLASS-"0x0021" 

VENT CODE-"0x0001" 


</ЕУЕМТ LOG» 


GET FEDERATION, MULTICAST 


Use the GET. FEDERATION, MULTICAST command to retrieve the current federation multicast options. The response 
includes values for Multicast Discovery, Multicast Announcement Interval, IPv6 Multicast Scope, and Multicast TTL. The 
command must appear within a RIB INFO command block, and RIB INFO MODE must be set to read. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="read"> 
«GET FEDERATION MULTICAST/» 
«/RIB INFO» 
</LOGIN> 


</RIBCL> 


GET_FEDERATION_MULTICAST parameters 


None 


GET_FEDERATION_MULTICAST runtime errors 


None 
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СЕТ FEDERATION, MULTICAST return messages 


The following response is typical of the data returned from the GET FEDERATION, MULTICAST command: 


<?xml version="1.0"?> 

<RIBCL VERSION-"2.23"» 

«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 


MULTICAST FEDERATION ENABLED VALUE="Yes"/> 
MULTICAST DISCOVERY ENABLED VALUE="Yes"/> 
MULTICAST ANNOUNCEMENT INTERVAL VALUE="60"/> 
ІРУ6 MULTICAST SCOPE VALUE="Site"/> 
<MULTICAST TTL VALUE="255"/> 

</СЕТ FEDERATION MULTICAST> 

</RIBCL> 


T 


SET FEDERATION, MULTICAST 


Use SET. FEDERATION, MULTICAST to enable or disable iLO Federation, and to set the iLO Federation multicast options, 
including Multicast Discovery, Multicast Announcement Interval, IPv6 Multicast Scope, and Multicast TTL. 


For example: 


<RIBCL VERSION="2.0"> 

<LOGIN USER_LOGIN="adminname" PASSWORD="password"> 

<КІВ INFO MODE="write"> 

<SET FEDERATION MULTICAST> 

MULTICAST FEDERATION ENABLED VALUE="Yes"/> 
MULTICAST DISCOVERY ENABLED VALUE="Yes"/> 
MULTICAST ANNOUNCEMENT INTERVAL VALUE="30"/> 
IPV6 MULTICAST SCOPE VALUE="Site"/> 

U 


<MULTICAST TTL VALUE="255"/> 
«/SET FEDERATION MULTICAST» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


NOTE: Disabling multicast discovery or announcements disables the iLO Federation features. 


All devices in an iLO Federation group must have the same scope and TTL to properly enable peer discovery. 


SET_FEDERATION_MULTICAST parameters 


MULTICAST_FEDERATION_ENABLED enables or disables iLO Federation. The value must be either Yes (enabled) or No 
(disabled). When disabled, iLO federation management features are unavailable. 


MULTICAST. DISCOVERY ENABLED enables or disables multicast discovery. The value must be either Yes (enabled) or 
No (disabled). When enabled, this parameter makes the iLO discoverable as federated on the network. When disabled, iLO 
Federation features are unavailable. 


MULTICAST ANNOUNCEMENT INTERVAL sets the number of seconds between each multicast availability 
announcement on the network. Valid values are Disabled, 30, 60, 120, 300, 600, 900, апа 1800 seconds. When 
disabled, iLO Federation features are unavailable. 


IPV6. MULTICAST SCOPE sets the scope of multicast discovery. Valid values are Link (link-local), Site (site-local), and 
Organization (organization-local). All devices іп an iLO Federation group must һауе the same scope to properly 
enable peer discovery. 
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MULTICAST TTL sets the time to live, limiting the number of switches that can be traversed before the multicast 
discovery is stopped. Valid values are between 1 and 255. All devices in a federated group must have the same TTL to 
properly enable peer discovery. 


SET, FEDERATION, MULTICAST runtime errors 


Some possible SET FEDERATION, MULTICAST error messages include the following: 


* The MULTICAST ANNOUNCEMENT INTERVAL VALUE is invalid. 


* The IPV6 MULTICAST SCOPE VALUE is invalid. 


* The MULTICAST TTL VALUE is invalid. Valid values are between 1 and 255. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


GET FEDERATION ALL GROUPS 


Use the GET FEDERATION ALL GROUPS command to retrieve a list of all iLO Federation group names. The command 
must appear within a RIB INFO command block, and БІВ INFO MODE must be set to read. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="read"> 
«GET FEDERATION ALL GROUPS/» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


GET_FEDERATION_ALL_GROUPS parameters 


None 


GET_FEDERATION_ALL_GROUPS runtime errors 


None 


GET_FEDERATION_ALL_GROUPS return messages 


The following response is typical of the data returned from the GET FEDERATION, ALL GROUPS command: 


<?xml version="1.0"?> 

<RIBCL VERSION="2.23"> 

«RESPONSE 
STATUS-"0x0000" 

MESSAGE='No error' 

/> 

«GET FEDERATION ALL GROUPS» 


«GROUP NAME VALUE="Group1"/> 

«GROUP NAME VALUE="Group2"/> 
«/GET FEDERATION ALL GROUPS> 
</RIBCL> 
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GET FEDERATION ALL GROUPS INFO 


Use GET FEDERATION ALL GROUPS INFO to retrieve a list of all iLO Federation group names and the associated 
privileges for each group. To retrieve the privileges of a specific group, use GET FEDERATION GROUP. In addition to the 
group name, the returned group privileges include: 


e User Account Administration ADMIN, PRIV) 

e Remote Console Access (REMOTE CONS PRIV) 
e Virtual Power and Reset (RESET. SERVER PRIV) 
e Virtual Media (VIRTUAL, MEDIA. PRIV) 

e iLO Setting Configuration (СОМЕІС ILO PRIV) 


e Login Privilege (LOGIN, PRIV) 


NOTE: GET FEDERATION ALL GROUPS INFO has not been enhanced to support the extended group privileges 
available from the iLO 5 web interface. For more information about setting group privileges in iLO 5, see the HPE iLO 5 
User Guide in the HPE Information Library at http://www.hpe.com/info/ilo/docs. 


The command must appear within a БІВ INFO command block, and КІВ INFO MODE must be set to read. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="read"> 
«GET FEDERATION ALL GROUPS INFO/» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


GET_FEDERATION_ALL_GROUPS_INFO parameters 


None. 


GET_FEDERATION_ALL_GROUPS_INFO runtime errors 


None 


GET_FEDERATION_ALL_GROUPS_INFO return messages 


The following response is typical of the data returned from the GET FEDERATION, ALL, GROUPS INFO command: 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
<RESPONSE 
STATUS="0x0000" 
MESSAGE='No error' 
[> 
«GET FEDERATION ALL GROUPS INFO» 
XFEDERATION GROUP» 
«GROUP NAME VALUE-"Groupl"/» 
XADMIN PRIV VALUE="Yes"/> 
<REMOTE CONS PRIV VALUE-"Yes"/» 
«RESET SERVER PRIV VALUE-"Yes"/» 
«VIRTUAL MEDIA PRIV VALUE="Yes"/> 


"uj 
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«CONFIG ILO PRIV VALUE-"Yes"/» 
«LOGIN PRIV VALUE="Yes"/> 
«/FEDERATION GROUP» 
«FEDERATION GROUP» 

«GROUP NAME VALUE="Group2"/> 
XADMIN PRIV VALUE-"Yes"/» 
<REMOTE CONS PRIV VALUE-"Yes"/» 
«RESET SERVER PRIV VALUE="No"/> 
«VIRTUAL MEDIA PRIV VALUE-"No"/» 
< 
< 
D 
D 


CONFIG ILO PRIV VALUE="Yes"/> 
LOGIN PRIV VALUE="Yes"/> 


</FE 
</GET_FE 
</RIBCL> 


ERATION ALL GROUPS INFO» 


GET FEDERATION, GROUP 


Use GET FEDERATION. GROUP to retrieve the privileges granted to a specified Federated group. To retrieve the 
privileges granted to all groups, use GET FEDERATION ALL GROUPS INFO. In addition to the group name, the return 
includes the following group privileges: 


e User Account Administration ADMIN, PRIV) 

e Remote Console Access (REMOTE CONS PRIV) 
e Virtual Power and Reset (RESET. SERVER PRIV) 
e Virtual Media (VIRTUAL, MEDIA PRIV) 

e iLO Setting Configuration (СОМЕІС ILO PRIV) 


e Login Privilege (LOGIN, PRIV) 


The command must appear within а БІВ INFO command block, and ВІВ INFO MODE must be set to read. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="read"> 
«GET FEDERATION GROUP GROUP NAME-"groupname"/» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


NOTE: GET_FEDERATION_GROUP has not been enhanced to support the extended group privileges available from the 
iLO 5 web interface. For more information about setting group privileges in iLO 5, see the HPE iLO 5 User Guide in the 
HPE Information Library at http://www.hpe.com/info/ilo/docs. 


GET_FEDERATION_GROUP parameters 


GROUP_NAME—The name of the group to be displayed. The name must be from 1 to 31 characters long. 


GET_FEDERATION_GROUP runtime errors 


GET_FEDERATION_GROUP returns the following message if the value specified for GROUP_NAME does not match any 
existing groups: 


Group name not found. 
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СЕТ FEDERATION, GROUP return messages 


The following response is typical of the data returned from the GET FEDERATION, GROUP command: 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
<RESPONSE 
STATUS="0x0000" 
MESSAGE='No error' 
/> 
<GET FEDERATION GROUP> 
XFEDERATION GROUP» 
«GROUP NAME VALUE="Group2"/> 
<ADMIN PRIV VALUE="Yes"/> 
<REMOTE CONS PRIV VALUE="Yes"/> 
«RESET SERVER PRIV VALUE="No"/> 
«VIRTUAL MEDIA PRIV VALUE-"No"/» 
« 
« 
D 
D 


T 


а Ej 


CONFIG ILO PRIV VALUE="Yes"/> 
LOGIN PRIV VALUE="Yes"/> 


</FE 
</GET_FE 
</RIBCL> 


ADD_FEDERATION_GROUP 


Use ADD_FEDERATION_GROUP to create a new iLO Federation group, or to include an iLO in an existing group 
membership while setting the privileges of that group on the iLO. The command must appear within a RIB INFO command 
block, and RIB_LINFO MODE must be set їо write. 


NOTE: ADD_FEDERATION_GROUP has not been enhanced to support the extended group privileges available from the 
iLO 4 web interface. For more information about setting group privileges in iLO 4, see the HPE iLO 4 User Guide. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="write"> 
«ADD FEDERATION GROUP 
GROUP NAME-"groupname" 
GROUP KEY-"groupkey"» 
XADMIN PRIV VALUE-"Yes"/» 
<КЕМОТЕ CONS PRIV VALUE-"Yes"/» 
«RESET SERVER PRIV VALUE-"Yes"/» 
«VIRTUAL MEDIA PRIV VALUE="Yes"/> 
<CONFIG ILO PRIV VALUE-"Yes"/» 
«LOGIN PRIV VALUE="Yes"/> 
«/ADD FEDERATION GROUP» 
</КІВ INFO» 
</LOGIN> 
</RIBCL> 


NOTE: A single iLO can belong to up to a maximum of 10 iLO Federation groups. To remove an iLO system from an iLO 
Federation group, use DELETE FEDERATION GROUP. 


ADD, FEDERATION GROUP parameters 


GROUP NAME- The name of the group to be added. The name must be from 1 to 31 characters long. 
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GROUP КЕҮ--Тһе password for the group to be added. Тһе password сап Бе from the configured minimum password 


length to 31 characters long. If Password Complexity is enabled on the iLO system, the group key must meet the 
password complexity requirements. 


ADMIN. PRIV CAdminister User Accounts)—Enables members of a group to add, edit, and delete iLO user accounts. 


REMOTE CONS PRIV (Remote Console Access)—Enables members of a group to remotely access the host system 
Remote Console, including video, keyboard, and mouse control. 


RESET SERVER PRIV (Virtual Power and Reset)—Enables members of a group to power-cycle or reset the local iLO 
system. 


VIRTUAL. MEDIA PRIV (Virtual Media)—Enables members of a group to use scripted Virtual Media with the local iLO 


system. 


CONFIG ILO PRIV (Configure iLO Settings)—Enables members of a group to configure most iLO settings, including 
security settings, and to remotely update firmware. 


LOGIN, PRIV CLogin)—Enables members of a group to log in to iLO. 


ADD FEDERATION GROUP runtime errors 


Some possible ADD. FEDERATION. GROUP error messages include the following: 


The 


The 


The 


The 


The 


GRO 


GRO 


GRO 


GRO 


GRO 


P KEY is 


P KEY is 


Group membership 


Cannot add group 


P NAME must not be left blank. 
P NAME is too long. 


P KEY must not be left blank. 


too long. 
too short. Use a longer key. 


already exists. 


membership. Maximum number of memberships reached: 10. 


MOD FEDERATION GROUP 


Use MOD FEDERATION GROUP to modify an existing iLO Federation group membership and associated privileges. The 
command must appear within a ВІВ INFO command block, and ВІВ INFO MODE must be set to write. 


NOTE: All parameters are optional. Any iLO Federation property that is not explicitly modified retains its old value. 


For example: 


<RIBCL V. 


«LOGIN USER LOGI 


«RIB INFO MODI 
«MOD FE 


D 
«GROUP | 
U 


ERSION="2.0"> 


N="adminname" PASSWORD="password"> 
E-"write"» 


ERATION GROUP GROUP NAME="groupname"> 


NAME VALUE-"newgroupname"/» 
KEY VALUE-"newgroupkey"/» 
PRIV VALUE="Yes"/> 


(| CONS PRIV VALUE="Yes"/> 


SERVER PRIV VALUE-"Yes"/» 


‚ MEDIA PRIV VALUE="Yes"/> 


ILO PRIV VALUE-"Yes"/» 


PRIV VALUE="Yes"/> 


RATION GROUP» 
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«/LOGIN» 
</RIBCL> 


NOTE: MOD_FEDERATION_GROUP has not been enhanced to support the extended group privileges available from the 
iLO 5 web interface. For more information about setting group privileges in iLO 5, see the HPE iLO 5 User Guide in the 
HPE Information Library at http://www.hpe.com/info/ilo/docs. 


MOD FEDERATION GROUP parameters 


GROUP NAME- The name of the group to be changed, or the new name to be given to the specified Federation group, 
depending on the parameters' location. The name must be from 1 to 51 characters long. 


GROUP КЕҮ--Тһе new password to set for the group. The password сап be from the configured minimum password 
length to 31 characters long. 


ADMIN. PRIV CAdminister User Accounts)—Enables members of a group to add, edit, and delete iLO user accounts. 


REMOTE CONS PRIV (Remote Console Access)—Enables members of a group to remotely access the host system 
Remote Console, including video, keyboard, and mouse control. 


RESET SERVER PRIV (Virtual Power and Reset)—Enables members of a group to power-cycle or reset the local iLO 
system. 


VIRTUAL MEDIA PRIV (Virtual Media)—Enables members of a group to use scripted Virtual Media with the local iLO 
system. 


СОМЕІС ILO. PRIV (Configure iLO Settings)—Enables members of a group to configure most iLO settings, including 
security settings, and to remotely update firmware. 


LOGIN, PRIV CLogin)—Enables members of a group to log in to iLO. 


MOD FEDERATION, GROUP runtime errors 


Some possible MOD FEDERATION GROUP error messages include the following: 


* The GROUP NAME must not be left blank. 


NOTE: This error appears only if the value in the «MOD FEDERATION GROUP 

GROUP NAME-"groupname"-» command is left blank. This error does not appear if “newgroupname” in the 
parameter setting «GROUP NAME VALUE-"newgroupname"/» is left blank or the line is omitted. In that case, the 
original group name is retained. 


* Group name not found. 


* The GROUP NAME is too long. 


F 


e The GROUP_KEY must not be left blank. 


e The GROUP_KEY is too long. 
* Group membership already exists. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


DELETE FEDERATION GROUP 


Use DELETE FEDERATION, GROUP to remove the iLO from an iLO Federation group membership. The command must 
appear within a RIB INFO command block, and RIB INFO MODE must be set to write. 
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Еог ехатріе: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="write"> 
«DELETE FEDERATION GROUP GROUP NAME-"groupname"/» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


DELETE_FEDERATION_GROUP parameters 


GROUP_NAME—The name of the iLO Federation group to be deleted. The name must be from 1 to 31 characters long 
and must already exist as a membership group. 


DELETE_FEDERATION_GROUP runtime errors 


Some possible runtime errors returned by DELETE FEDERATION GROUP include the following: 


• Ifthe value specified for GROUP NAME does not match any existing groups: Group name not found. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


CLEAR, EVENTLOG 


The CLEAR EVENTLOG command clears the iLO Event Log. For this command to parse correctly, the command must 
appear within a КІВ INFO command block, and ВІВ INFO MODE must Бе set to write. The user must have the Configure 
iLO Settings privilege to execute this command. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<RIB INFO MODE="write"> 
<CLEAR_EVENTLOG/> 
</RIB_INFO> 
</LOGIN> 
</RIBCL> 


CLEAR_EVENTLOG parameters 


None 


CLEAR_EVENTLOG runtime errors 


The possible CLEAR EVENTLOG error messages аге: 


* iLO information is open for read-only access. Write access is required for 
this operation. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 
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СОМРОТЕН І.ОСК CONFIG 


The COMPUTER LOCK CONFIG command is used to configure the Remote Console Computer Lock feature. For this 
command to parse correctly, the command must appear within a БІВ INFO command block, and БІВ INFO MODE must be 
set to write. The user must have the Configure iLO Settings privilege to execute this command. 


Uppercase letters are not supported, and are converted automatically to lowercase. If either a double quote or a single 
quote is used, it must be different from the delimiter. For a complete list of the supported custom keys, see the iLO User 
Guide on the Hewlett Packard Enterprise website at: http://www.hpe.com/support/ilo-docs. 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«RIB INFO MODE="write"> 
«COMPUTER LOCK CONFIG» 


<!-- To set default Windows Computer Lock keys combination: --> 
«COMPUTER LOCK value="windows"/> 


<!-- To configure custom Computer Lock keys combination: --> 
<1-- 

«COMPUTER LOCK value-"custom"/» 

«COMPUTER LOCK KEY value-"L GUI,1"/» 


--» 

<!-- To disable Computer Lock feature: ==> 
«be 

«COMPUTER LOCK value="disabled"/> 

--> 


</COMPUTER LOCK СОМҒІС> 
</КІВ INFO» 
</LOGIN> 
</RIBCL> 
COMPUTER_LOCK_CONFIG parameters 
COMPUTER_LOCK value— You can customize Windows, Linux and other operating systems by setting the value: 


. windows 


—Sets the command to define the computer lock for a Windows based operating system. The computer lock on 
Windows based operating systems defaults to the Windows logo + L keys. 


* custom 
—Sets the command to define the computer lock for a non-Windows based operating system. 
* disabled 


—Disables the computer lock feature. 


COMPUTER_LOCK key—Sets the key combination to lock an operating system. 


For example: 


<COMPUTER_LOCK key="1_gui,1"/> 


COMPUTER_LOCK_CONFIG runtime errors 


Possible COMPUTER_LOCK_CONFIG error messages include: 
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110 information is open for read-only access. Write access is required for 
this operation. 


Invalid number of parameters. 


The maximum allowed 


is five. 


User does not have correct privilege for action. CONFIG ILO PRIV required. 


Invalid COMPUT 


ER LOCK option; value must be windows, 


custom, or disabled. 


COMPUTER LOCK value must be set to custom to use the COMPUTER LOCK KEY tag. 


The COMPUTER LOCK key command was used without a preceding COMPUTER LOCK 
value command equal to custom. 


The key parameter specified is not valid. 


GET NETWORK, SETTINGS 


The GET NETWORK SETTINGS command requests the respective iLO network settings. For this command to parse 
correctly, the command must appear within a RIB INFO command block, and RIB INFO MODE can be set to read. 


For example: 


«RIBCL V 


< 


< 
</ 


Lr] 


«/RIB INFO» 
/ LOGIN» 
RIBCL> 


RSION-"2.0"» 
LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE-"read"» 
«GET NETWORK 5 


GET, NETWORK SETTINGS parameters 


None 


ETTINGS/» 


СЕТ. NETWORK, SETTINGS runtime errors 


None 


СЕТ NETWORK SETTINGS return messages 


A possible GET NETWORK SETTINGS return message is: 


«G 


ET NETWORK SETTINGS» 
«ENABLE NIC VALUE-"Y"/» 
«SHARED NETWORK PORT VALUE="N"/> 
<УТАМ ENABLED VALUE="N"/> 
<УТАМ ID VALUE="0"/> 
«SPEED AUTOSELECT VALUE-"Y"/» 
«NIC SPEED VALUE-"Automatic"/» 
«FULL DUPLEX VALUE-"Automatic"/» 
«DHCP ENABLE VALUE="N"/> 
«DHCP GATEWAY VALUE-"N"/» 
<DHCP DNS SERVER VALUE="N"/> 
<DHCP WINS SERVER VALUE="N"/> 
<DHCP STATIC ROUTE VALUE="N"/> 
<DHCP_DOMAIN NAME VALUE="N"/> 
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ETTINGS VALUE="N"/> 


‘-RVER VALUE="N"/> 


Б 


(RVER VALUE="Y"/> 


«PING GATEWAY VA 


UE-"N" /> 
Е-"9с:8е:99:18:07:52"/> 


x 
pi 
j G E 


E="192.168.1.14"/> 


UE-"255.255.255.0"/» 
ESS VALUE="0.0.0.0"/> 


UE="foghat"/> 


| VALUE-"nexus.ilotest.com"/» 


(RVER VALUE="192.168.1.5"/> 


VALUE="0.0.0.0"/> 


< 
D 
a 

rj 


Е-"0.0.0.0"/> 


ERVER VALUE="0.0.0.0"/> 


,RVER VALU] 


="0.0.0.0"/> 


<SNTP SERVER1 VALUE="192.168.1.2"/> 


<SNTP SERVER? VA UR="" /> 


<TIMEZONE VA 


UE="Greenwich"/> 


<STATIC ROUT 


<STATIC ROUT 


<STATIC ROUT 


MASK="0.0.0.0" 
GATEWAY="0.0.0.0"/> 


Е 2 DEST="0.0.0.0" 


E 1 DEST-"0.0.0.0" 


MASK-"0.0.0.0" 
GATEWAY="0.0.0.0"/> 


Е 3 DEST="0.0.0.0" 


MASK-"0.0.0.0" 
GATEWAY-"0.0.0.0"/» 


<ІРУ6 ADDRESS VALUE-"2001:2:1::14" 


<ІРУ6 ADDRESS 


<ІРУ6 ADDRESS 


<ІРУ6 STATIC ROUTI 

<ІРУ6 STATIC ROUTI 
D 

<IPV6 STATIC ROUTE 3 
D 


PV6 DEST-"2001:1001:2002:3003::" 


<ІРУ6 PRIM DNS SERVER VALUE-"2001:1:2::5"/» 


EFIXLEN-"64" 
R SOURCE-"STATIC" 
R STATUS="ACTIVE"/> 


<p m 
D 

С 

E | 

І 


EFIXLEN-"64" 
SOURCE-"SLAAC" 
STATUS-"ACTIVE"/» 


<P Pv 
D 
а 
ІЗ | 
t 


"d 


FIXLEN-"64" 

R SOURCE-"SLAAC" 

R STATUS-"ACTIVE"/» 

l 

V6 DEST-"2001:2:2::20" 
EFIXLEN-"64" 

V6 GATEWAY-"fe80::1:2:3" 


D D 
t LUC cC 


I 
P 
I 


"d 


п) 


ADDR_STATUS="ACTIVE"/> 
E 2 

IPV6 DEST-"::" 

PREFIXLEN="0" 

IPV6 GATEWAY-"::" 


A 


DR STATUS-"INACTIVE"/» 


I 
PREFIXLEN-"64" 

IPV6 GATEWAY-"fe80::1:2:3" 
ADDR_STATUS="ACTIVE"/> 


<IPV6_SEC_DNS_SERVER VALUE="2001:2:1::5"/> 
«IPV6 TER DNS SERVER VALUE=": :"/> 


L 


"fe80::9e8e:99ff:fe18:752" 


2001:2:1:0:9e8e:99ff:fe18 


2792" 
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<ІРУ6 DEFAULT GATEWAY VALUE-"::"/» 
<ІРУ6 PREFERRED PROTOCOL VALUE-"Y"/» 
<ІРУ6 ADDR AUTOCFG VALUE-"Y"/» 

<ІРУ6 REG DDNS SERVER VALUE-"Y"/» 
«DHCPV6 STATELESS ENABLE VALUE-"Y"/» 
<DHCPV6 STATEFUL ENABLE VALUE-"Y"/» 
«DHCPV6 RAPID COMMIT VALUE="N"/> 
«DHCPV6 DOMAIN NAME VALUE-"N"/» 
«DHCPV6 SNTP SETTINGS VALUE-"N"/» 
«DHCPV6 DNS SERVER VALUE-"N"/» 

<ІІО NIC AUTO SELECT VALUE-"LINKACT"/» 
<ІІО NIC AUTO SNP SCAN VALUE="0"/> 
<ІІО NIC AUTO DELAY VALUE-"90"/» 
XILO NIC FAIL OVER VALUE="DISABLED"/> 
<ІІО NIC FAIL OVER DELAY VALUE="300"/> 
«SNP PORT VALUE-"1"/» 


«/GET NETWORK SETTINGS» 


If the request is unsuccessful, you might receive the following message: 


«R 


ESPONSE 


STATUS - "0х0001" 


" 


MSG - "Error Message"/» 


For IPV6 ADDRESS the ADDR STATUS-'string", will report status of “Pending”, "Active", or "Failed" for each address. 
Pending indicates the Duplicate Address Detection (DAD) test is still in progress, Failed indicates that a duplicate 
address was found on the network and the address is not currently in use by iLO, and Active indicates that DAD 
passed and the address is in use by iLO. 


For IPV6 ADDRESS the ADDR SOURCE-"string" will report status of "Static", "SLAAC", or "DHCPv6", indicating the 
configuration source for that address. SLAAC indicates RFC 4862 Stateless Address Auto Configuration. 


For IPV6 STATIC ROUTE [1:3] the ADDR_STATUS="string” will report status of "Active" or “Failed” for each static 
route configured. Active indicates the route was accepted by the networking stack and is in use. Failed indicates the 
route was rejected by the networking stack, typically this is due to a "No route to source" error for the specified 
gateway. In this case, iLO will periodically retry setting the static route as long as it remains configured (а route to the 
gateway may be discovered in the future through router advertisements or further iLO address configuration.) 


MOD NETWORK, SETTINGS 


Use MOD. NETWORK SETTINGS to modify network settings. For this command to parse correctly, the command must 
appear within a RIB INFO command block, and БІВ INFO MODE must be set to write. The user must have the Configure 
iLO Settings privilege to execute this command. 


The iLO scripting firmware does not attempt to decipher if the network modifications are appropriate for the network 
environment. When modifying network settings, be aware of the network commands provided to the management 
processor. In some cases, the management processor ignores commands and no error is returned. 


For 


example, when a script includes the command to enable DHCP and a command to modify the IP address, the IP 


address is ignored. Changing the network settings to values that are not correct for the network environment might cause 
а loss of connectivity to iLO. 


iLO reboots in response to changes made to the following: 


All IPv4 settings 


Some settings for IPv6, including the following Cif the parameter change requires a reboot): 
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о  |PV6, PREFERRED. PROTOCOL 
о  |PV6 ADDR AUTOCFG 
°  DHCPv6 (all) 
e Settings for SNTP and time zone, including the following Conly if the parameter change requires a reboot): 
°  DHCP. SNTP. SETTINGS 
о  DHCPv6, SNTP SETTINGS 
о 5МТР SERVER1 
о 5МТР SERVER2 


о TIMEZONE 
For example: 


<RIBCL VERSION="2.0"> 

<LOGIN USER LOGIN="adminname" PASSWORD="password"> 

<RIB INFO MODE="write"> 

D NETWORK SETTINGS»? 
«ENABLE NIC value="Yes"/> 
«REG DDNS SERVER value="Yes"/> 
<PING GATEWAY value="No"/> 
«DHCP DOMAIN МАМЕ value="Yes"/> 
<SPEED AUTOSELECT value="YES"/> 
< 
< 
< 
< 


PEED value="100"/> 

FULL DUPLEX value="Yes"/> 
HCP ENABLE value="No"/> 
P ADDRESS value="172.20.60.152"/> 

ET MASK value="255.255.255.0"/> 
<GATEWAY ІР ADDRESS value="172.20.60.1"/> 
5 E value-"demoilo"/» 
OMAIN NAME value-"internal.com"/» 
EWAY value="Yes"/> 
ІКУЕК value="Yes"/> 
S SERVER value="Yes"/> 
TATIC ROUTE value-"Yes"/» 
EG WINS SERVER value="Yes"/> 
PRIM DNS SERVER value-"0.0.0.0"/» 
value="0.0.0.0"/> 
_DNS_ value="0.0.0.0"/> 
RIM WINS SERVER value="0.0.0.0"/> 
<SEC_WINS SERVER value="0.0.0.0"/> 
<STATIC ROUTE 1 DEST="0.0.0.0" GATEWAY="0.0.0. 
<STATIC_ ROUTE 2 DEST-"0.0.0.0" GATEWAY="0.0.0. 
<STATIC_ROUTE 3 DEST-"0.0.0.0" GATEWAY="0.0.0 
<DHCP_SNTP SETTINGS value="Yes"/> 
<SNTP_SERVER1 value="0.0.0.0"/> 
<SNTP_SERVER2 value="0.0.0.0"/> 
<TIMEZONE value="Greenwich (GMT) "/> 
<!-- This tag can be used on ап iLO blade server to force iLO --> 
<!-- to attempt to get an IP address from the signal backplane --> 
<!-- іп а server enclosure. The IP address must be set prior --> 
<!-- with Mod Enc Bay IP Settings.xml ==> 


z 
D 
z 
Ei | 


TW O G OTOU 
I 
Q 
U 
neon 
z 
2 о м 
о 


о 
Іні 
о 
iw) 
z 
о 
о 
"d 
«1 


У 
Іні 
ж 
(т) 
z 
[05] 
о 
"d 
< 


NRA A AKA AA AAA A 


ar 
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«ENCLOSURE IP ENABLE VALUE="Yes"/> 
lume iLO 4 - Version 2.00 and later 
<!-- 110 3 - None. 
<!-- iLO 2 - None. 
<!-- VALUES "DISABLED" "LINKACT" "RCVDATA" "DHCP" 
<ІІО NIC AUTO SELECT VALUE="DISABLED"/> 
«SNP PORT VALUE="1" 
<ILO NIC AUTO SNP SCAN VALUE="0"/> 
<ІІО МІС АОТО DELAY VALUE="90"/> 
<ІҺО NIC FAIL OVER VALUE-"DISABLED"/» 
<ILO NIC FAIL OVER DELAY VALUE="300"/> 

«/MOD NETWORK SETTINGS» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


Modify VLAN for the embedded LOM example: 


<RIBCL version="2.0"> 


<LOGIN USER_LOGIN="adminname" PASSWORD="password"> 


<RIB_INFO MODE="WRITE" > 
«MOD NETWORK SETTINGS» 


«SHARE 

«V 

<УТАМ ID VALUE-"1"/» 

«/MOD NETWORK SETTINGS» 
«/RIB INFO» 

</LOGIN> 

</RIBCL> 


Modify VLAN for the FlexibleLOM example: 


<RIBCL version="2.21"> 


«ENABLE NIC value="Yes”/> 
D NETWORK PORT VALUE-"Yes"/» 
VALUE-"Yes" 


/> 


«LOGIN US! 
<КІВ INFO MODE-"WRITE" > 
NETWORK SETTINGS» 


E ,jOGIN-"adminname" PASSWORD="password"> 


«ENABLE NIC value="Yes"/> 


D NETWORK PORT VALUE="FlexibleLOM"/> 


VALUE-2"Yes" 
<VLAN Е-"1" /> 
«/MOD NETWORK SETTINGS» 

«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


e&t 
Tj 


RBSU POST IP example: 


<RIBCL version="2.0"> 
<LOGIN USER_LOGIN="adminname 
<RIB_ INFO MODE-2"write" > 
«MOD GLOBAL SETTINGS» 
«RBSU POST IP VALUE-"Y"/» 
«/MOD GLOBAL SETTINGS» 
«/RIB INFO» 


L 


/> 


" PASSWORD="password"> 
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</LOGIN> 
</RIBCL> 


Shared network port example: 


NOTE: Besides being present in the sample script MOD_NETWORK_SETTINGS.xml, shared network port configuration is 


included in the sample script Shared Network Port.xml. 


<RIBCL version="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE-"WRITE" > 
«MOD NETWORK SETTINGS» 


«SHARED NETWORK PORT VALUE-"N"/» 

<!-- iLO 4 - Version 2.00 апа later --» 
<!-- 110 3 - None. --» 
<!-- iLO 2 - None. --> 
<!-- VALUES "", "1", "2" --> 
<1== 
<5МР РОКТ VALUE="1"/> 

--> 


</MOD NETWORK SETTINGS» 
«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


IPv6_ADDRESS support 


MOD NETWORK, SETTINGS supports IPvé6. This section of the sample script (shown below) is commented out by default. 
Uncomment the parameters as needed to enable them, and disable (comment out) the equivalent IPv4 parameters. See 


"IPv6 MOD NETWORK, SETTINGS parameters" іп MOD NETWORK, SETTINGS parameters for information on the 
parameters and their values. 


<ІРУ6 ADDRESS VALUE-"2001:DB8:2:1::15" PREFIXLEN="64"/> 

<ІРУ6 ADDRESS VALUE-"2001:DB8:2:2::15" PREFIXLEN="64"/> 

<ІРУ6 ADDRESS VALUE="FC00:DB8:2:3::15" PREFIXLEN="64"/> 
222 Ы 


IXLEN="64" 
. SOURCE-"STATIC" 
. STATUS-"ACTIVE"/» 


U 
U 
U 
<ІРУ6 ADDRESS VALUE-"FCOO:DB8: 
E 
R 
R 


n 


«IPV6 STATIC ROUTE 
IPV6 DEST="::" 

PREFIXLEN="0" 

ІРУ6 GATEWAY-"::" 

ADDR 5ТАТ05-"ІМАСТІУЕ"/> 

<ІРУ6 5ТАТІС ROUTE 2 

ІРУ6 DEST-":;" 

PREFIXLEN="0" 

ІРУ6 GATEWAY-"::" 

ADDR_STATUS="INACTIVE"/> 

<IPV6 STATIC ROUTE 3 

IPV6 DEST-"2001:DB8:2002:3003::" 

PREFIXLEN-"64" 

IPV6 GATEWAY-"2001:DB8:1::40" 

ADDR STATUS-"ACTIVE"/» 
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<ІРУ6 PRIM DNS SERVER VALUE-"2001:DB8:2:1::13"/» 
DNS SERVER VALUE="::"/> 
DNS SERVER VALUE=": :"/> 
ULT GATEWAY VALUE=": :"/> 
ERRED PROTOCOL VALUE-"Y"/» 
DR AUTOCFG VALUE-"Y"/» 
DNS SERVER VALUE="Y"/> 
КІ VALUE="2001:DB8:2:1::13"/> 
(R2 VALUE-"2001:DB8:1::13"/» 
Support for the following 5 tags: --» 
iLO 4 - Version 1.30 and later. --> 
те 110 3 - Version 1.60 апа later. --> 
і 
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<!-- iLO 2 - None --> 
«DHCPV6 STATELESS ENABLE VALUE-"Y"/» 

«DHCPV6 STATEFUL ENABLE VALUE="Y"/> 

<DHCPV6 RAPID COMMIT VALUE="N"/> 

«DHCPV6 SNTP SETTINGS VALUE="N"/> 

<DHCPV6 DNS SERVER VALUE-"Y"/» 

«DHCPV6 DOMAIN МАМЕ VALUE-"Y"/» 


MOD NETWORK, SETTINGS runtime errors 


Possible MOD NETWORK SETTINGS error messages include: 


iLO information is open for read-only access. Write access is required for 
this operation. 


User does not have correct privilege for action. CONFIG ILO PRIV required. 


iLO may not be disabled on this server. 


This message is sent if ENABLE, NIC is set to No and the system is a blade. 


MOD NETWORK SETTINGS parameters 


If the following parameters are not specified, then the parameter value for the specified setting is preserved. Zero values 
are not permitted in some fields. Consequently, an empty string deletes the current value in some fields. 


ENABLE, NIC enables the NIC to reflect the state of iLO. The values are Yes or No. It is case insensitive. 


SHARED. NETWORK, PORT sets the Shared Network Port value. The values are LOM, FlexibleLOM, Yes, or No. The 
Shared Network Port feature is only available on servers with hardware, NIC firmware, and iLO firmware that supports this 
feature. This command is supported on all 300, 500, 700 and 900 ML/DL servers, though not all values, CLOM or 
FlexibleLOWM),are supported on all servers. 


No—Enables a NIC with a jack on the back of the server (a dedicated network port). 


Yes—Enables a NIC that is built into the server (а shared network port). The NIC handles server network traffic and 
can, if ILO is configured to do so, handle iLO traffic at the same time. 


LOM—Enables а NIC that is built into the server Ca shared network port). The NIC handles server network traffic and 
can, if ILO is configured to do so, handle iLO traffic at the same time. Not all servers support a LOM. 


FlexibleLOM—Enables an optional NIC that plugs into a special slot on the server. The NIC handles server network 
traffic and can, if iLO is configured to do so, handle iLO traffic at the same time. Not all servers support a FlexibleLOM. 


When using the iLO Shared Network Port, flashing the iLO firmware through the XML interface takes approximately 7 
minutes to complete. Flashing the firmware using Shared Network Port with iLO does not take any longer to complete 
than using the dedicated iLO management port. 
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VLAN_ENABLED—Enables Shared Network Port VLAN ID tagging. The possible values are Yes ог No. 
VLAN. ID—Sets the VLAN ID value. Values must be between 1 and 4094. 


REG DDNS SERVER VALUE instructs iLO to register the management port with a DDNS server. The possible values are 
Yes or No. 


PING. GATEWAY—When set to Y, this causes iLO to send four ICMPv4 echo request packets to the IPv4 gateway when 
iLO initializes. This keeps the ARP cache entry for iLO updated on the router responsible for routing packets for iLO. 


DHCP, DOMAIN. NAME—When set to Y, iLO uses the domain name provided by the DHCPv4 server. If both 
DHCP. DOMAIN. NAME and DHCPV6, DOMAIN. NAME are set to N, iLO uses a static value for the domain name, which is 
set in DOMAIN, NAME. 


SPEED AUTOSELECT is a Boolean parameter to enable or disable the iLO transceiver to auto-detect the speed 

(NIC SPEED) and duplex (FULL. DUPLEX) of the network. This parameter is optional, and the Boolean string must be set 
to Yes to enable the speed auto-detect. If this parameter is used, the Boolean string value must not be left blank. The 
possible values are Yes or No. The parameter value is case insensitive. 


МІС. SPEED is used to set the transceiver speed if SPEED AUTOSELECT is set to No. The possible values are 10, 100, or 
Automatic. If SPEED AUTOSELECT is set їо М, and NIC SPEED is set to Automatic, the current value is retained. In 
other words, if SPEED AUTOSELECT is set to N, then Automatic is not an applicable value for NIC SPEED. 


FULL. DUPLEX is used to decide if iLO is to support full-duplex or half-duplex mode. It is only applicable if 

SPEED. AUTOSELECT was set to No. The possible values are Yes, No, or Automatic. If SPEED AUTOSELECT is set to 
N, and FULL. DUPLEX is set to Automatic, the current value is retained. In other words, if SPEED AUTOSELECT is set 
to N, then Automatic is not an applicable value for FULL DUPLEX. The parameter value is case insensitive. 


DHCP ENABLE is used to enable DHCP. The possible values are Yes or No. The parameter value is case insensitive. 


IP ADDRESS is used to select the IP address for iLO if DHCP is not enabled. If an empty string is entered, the current 
value is deleted. 


SUBNET MASK is used to select the subnet mask for iLO if DHCP is not enabled. If an empty string is entered, the current 
value is deleted. 


GATEWAY IP ADDRESS is used to select the default gateway IP address for iLO if DHCP is not enabled. If an empty 
string is entered, the current value is deleted. 


DNS. NAME is used to specify the DNS name for iLO. The value can be from 1 to 49 characters. If an empty string is 
entered, the current value is deleted. Note that other interfaces this is referred to as the Hostname. 


DOMAIN. NAME is used to specify the domain name for the network where iLO resides. The value can be from 1 to 64 
characters. If an empty string is entered, the current value is deleted. If both DHCP DOMAIN. NAME and 
DHCPV6. DOMAIN. NAME are set to N, iLO uses the static value from DOMAIN. NAME. 


DHCP_GATEWAY specifies if the DHCP-assigned gateway address is to be used. The possible values are Yes or No. The 
parameter value is case sensitive. This selection is only valid if DHCP is enabled. 


DHCP. DNS SERVER specifies if the DHCP-assigned DNS server is їо be used. The possible values are Yes or No. The 
parameter value is case sensitive. This selection is only valid if DHCP is enabled. 


DHCP. WINS. SERVER specifies if the DHCP-assigned WINS server is їо be used. The possible values are Yes or No. The 
parameter value is case sensitive. This selection is only valid if DHCP is enabled. 


DHCP STATIC ROUTE specifies if the DHCP-assigned static routes are to be used. The possible values are Yes or No. 
The parameter value is case sensitive. This selection is only valid if DHCP is enabled. 


REG WINS SERVER specifies whether the iLO NIC must be registers with a WINS server. The possible values are Yes or 
No. The parameter value is case sensitive. 


PRIM, DNS. SERVER specifies the IP address of the primary DNS server. This parameter is only relevant if the DHCP- 
assigned DNS server address feature is disabled. If an empty string is entered, the current value is deleted. 
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SEC. DNS SERVER specifies the IP address of the secondary DNS server. This parameter is only relevant if the DHCP- 
assigned DNS server address feature is disabled. If an empty string is entered, the current value is deleted. 


TER. DNS. SERVER specifies the IP address of the tertiary DNS server. This parameter is only relevant if the DHCP- 
assigned DNS server address feature is disabled. If an empty string is entered, the current value is deleted. 


PRIM, WINS. SERVER specifies the IP address of the primary WINS server. This parameter is only relevant if the DHCP- 
assigned WINS server address feature is disabled. If an empty string is entered, the current value is deleted. 


SEC WINS, SERVER specifies the IP address of the secondary WINS server. This parameter is only relevant if the DHCP- 
assigned WINS server address feature is disabled. If an empty string is entered, the current value is deleted. 


STATIC ROUTE 1, STATIC ROUTE 2, and STATIC ROUTE 3 are used to specify the destination and gateway IP 
addresses of the static routes. The following two parameters are used within the static route commands. If an empty 
string is entered, the current value is deleted. 


е DEST specifies the destination IP addresses of the static route. This parameter is only relevant if the DHCP-assigned 
static route feature is disabled. If an empty string is entered, the current value is deleted. 


e GATEWAY specifies the gateway IP addresses of the static route. This parameter is only relevant if the DHCP- 
assigned static route feature is disabled. If an empty string is entered, the current value is deleted. 


DHCP SNTP SETTINGS is used to determine whether iLO is to get the SNTP time servers and timezone from the DHCP 
server or whether the user enters that information manually. 


SNTP_SERVER1 specifies the IP address of an IPv4 or IPv6 SNTP server or the FQDN of an SNTP server. The FQDN must 
adhere to the DNS standard, for example time.nist.gov. The iLO firmware contacts this server for the UTC time. If iLO is 
unable to contact this server, it attempts to contact the Secondary Time Server. This parameter is only relevant if 
DHCP. SNTP. SETTINGS is set to No. If an empty string is entered, the current value is deleted. 


SNTP. SERVER2 specifies the IP address of an IPv4 or IPv6 SNTP server or the FQDN of an SNTP server. The FQDN must 
adhere to the DNS standard, for example time.nist.gov. The iLO firmware contacts this server for the UTC time. If iLO 
cannot contact the Primary Time Server, it contacts this server. This parameter is only relevant if DHCP. SNTP SETTINGS 
is set to No. If an empty string is entered, the current value is deleted. 


TIMEZONE specifies the current time zone. Your entry for TIMEZONE in RIBCL must match exactly with an item from the 
Time Zone list in the iLO 5 web interface. To view a list of time zones, in the iLO 5 web interface, navigate to the SNTP 
tabs of either the iLO Dedicated Network Port or the iLO Shared Network Port pages. View the Time Zone list in the 
SNTP Settings section. Note that you cannot open the Time Zone list if either of the settings for Use DHCPv4 Supplied 
Time Settings or Use DHCPvó Supplied Time Settings are enabled. 


О NIC AUTO SELECT allows iLO to automatically select between either the shared or dedicated network ports at 
startup. The feature looks for network activity on the ports, and the first port found with network activity is selected for 
use. Any changes to this setting do not take effect until the iLO is reset. 


NOTE: When iLO is searching the NICs for activity, it periodically switches between the available physical NICs. If any of 
the physical NICs are connected to an unsecured network it may be possible for unauthorized access attempts to occur. 
Hewlett Packard Enterprise strongly recommends that whenever iLO is connected to any network: 


e Use strong passwords for iLO access 
e Never connect the ILO dedicated NIC to an unsecured network 


• If the server NIC that is shared with iLO is connected to an unsecured network, use VLAN tagging on the iLO portion 
of the shared NIC and make sure that VLAN is connected to a secure network only. 


ILO_NIC_LAUTO_SNP_SCAN scans multiple SNP ports during NIC auto-selection when supported by hardware. Valid values 
are O and 2. When the value is set to O, iLO scans currently configured SNP port. When the value is set to 2, iLO scans the 
SNP ports 1 and 2. If an empty string is entered, iLO scans the currently configured port. 
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ШО. NIC AUTO DELAY specifies the number of seconds to test each NIC connection before moving to the next while 
scanning. Valid values are 90 to 1800. If not specified, the delay will default to 90 seconds. Empty string is invalid. 


ILO NIC FAIL OVER configures NIC Ғай-оуег feature. Valid values аге DISABLED, LINKACT, RCVDATA and DHCP. Empty 
string disables the feature. To enable this feature, ILO NIC AUTO SELECT tag must also be present and must be a value 
other than DISABLED. 


ILO NIC FAIL OVER DELAY specifies the number of seconds to monitor each NIC connection before considering the 
connection as failed and switching to the next NIC. Valid values are 30 to 3600. If not specified, the delay will default to 
300 seconds. Empty string is invalid. 


SNP. PORT selects which physical NIC port to be used by the iLO Shared Network Port connection, if a port other than 1 is 
supported. Valid values are 1 and 2. If port 2 is chosen but not supported, port 1 is selected automatically. Note that even 
if more than 2 ports are available, for example with a LOM adapter, the iLO shared network port could only be mapped to 
the either of the first two ports Cif supported.) 


ІРуб MOD NETWORK, SETTINGS parameters 


If the following parameters are not specified, then the parameter value for the specified setting is preserved. Zero values 
are not permitted in some fields. Consequently, an empty string deletes the current value in some fields. 


IPV6 ADDRESS is used to configure a static IPv6 address on iLO. When IPV6 ADDRESS entries are included in a script, all 
previously configured IPv6 static addresses are deleted. Only the addresses specified in the script will be in use by iLO 
after the script successfully completes. All static address entries on iLO can be cleared by specifying a single blank 

IPV6 ADDRESS entry. 


e ADDR SOURCE may be included for ease in turning around GET NETWORK SETTINGS output as input to 
MOD. NETWORK, SETTINGS. However, if the value is not STATIC the entire entry is ignored. 


e ADDR STATUS may be included for ease in turning using GET NETWORK SETTINGS output as input to 
MOD. NETWORK SETTINGS. The value is always ignored as input. 
IPV6 STATIC ROUTE [1:3] is used to configure static routes for IPv6 on iLO. 


•  |PV6 DEST specifies the destination address prefix, limited by PREFIXLEN. Must be a valid literal IPv6 address in 
string form. 


e |PVó6 GATEWAY specifies the IPv6 address to which the prefixes should be routed. Must be a valid literal IPv6 address 
in string form. 


e ADDR STATUS is used for ease in turning GET NETWORK SETTINGS output around as input to 
MOD NETWORK SETTINGS, but is always ignored as input. 


NOTE: To clear a single static route, enter blank addresses (“::”) for IPV6 DEST and IPV6 GATEWAY, with “О” (zero) 
PREFIXLEN. 


IPV6 PRIM, DNS. SERVER, IPV6. SEC ОМ5 SERVER, and ІРУ6. TER. DNS SERVER are used to specify primary, secondary, 
and tertiary IPv6 DNS server addresses. Values must be valid literal IPv6 addresses in string form. These addresses are 
used in addition to the IPv4 DNS server addresses. Clear address entries by specifying blank IPv6 addresses (“::”). When 
iLO Client applications are configured to prefer IPv6 (see IPV6 PREFFERED PROTOCOL) the order of use will be: 


1. IPV6 PRIM DNS SERVER 
2. PRIM, DNS SERVER 

3. IPV6 SEC DNS. SERVER 

4. SEC DNS SERVER 

5. IPV6 TER DNS SERVER 


6. ТЕК DNS SERVER 
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When IPv4 protocol is preferred by iLO clients, the order оҒІРуб and IPv4 is reversed for each of primary, secondary, and 
then tertiary settings respectively. 


IPV6 DEFAULT GATEWAY allows you to add an IPvó address to the default gateway address list maintained by the ILO 
network stack. This is primarily for environments when no RA (router advertised) messages are present on the network. 
The value must be a valid literal IPv6 address in string form. Clear address entry by specifying a blank IPv6 address (“::”). 


IPV6 ADDR AUTOCFG enables or disables RFC 4862 SLAAC (Stateless Address Auto Configuration). Value must be 
either Y (enabled) or М (disabled). When enabled, iLO creates ІРу6 addresses for itself from RA prefixes as appropriate. 
When disabled, only the link-local address is automatically configured. Router advertisements are still monitored but not 
used for SLAAC address creation. 


IPV6 REG. DDNS SERVER enables or disables automatic DNS server IPv6 address registration. Value must be either Y 
Cenabled) or N (disabled). When enabled, iLO attempts to register AAAA and PTR records for its IPv6 addresses with the 
DNS server. 


IPV6 PREFERRED PROTOCOL enables or disables using IPv6é addresses as preferred. Value must be either Y (enabled) 
or М (disabled). When enabled, iLO client applications use IPv6 service addresses before IPv4 service addresses when 
both are configured. Client applications affected by this setting currently are the DNS name resolver and SNTP. In SNTP, if 
FQDNS are configured, and the DNS name resolver returns both A (IPv4) and AAAA (IPv6) records, the addresses are 
tried in order specified by this setting. For the DNS name resolver, if both IPv4 and IPv6 DNS addresses are configured, 
this setting determines the order of use for the primary addresses, then the secondary addresses, and finally the tertiary 
addresses. 


DHCPV6. STATELESS ENABLE and DHCPV6 STATEFUL ENABLE modifies the operational mode of DHCPv6. The 
values for both of these parameters сап be either Y (enabled) or N (disabled). 


e DHCPV6 STATEFUL ENABLE is analagous to DHCPv4, and enables the configuration of a node address and 
additional parameters such as NTP server location and time zone. 


e DHCPV6 STATELESS ENABLE enables the configuration of parameters such as NTP server location but does not 
provide for the configuration of a node address. This mode may be used with IPv6 Stateless Address Auto- 
Configuration (SLAAC) to provide configuration data that cannot otherwise be provided. 


DHCPV6 STATELESS ENABLE апа DHCPV6 STATEFUL ENABLE work together in a DHCPvó environment. In most 
environments, if DHCPV6 STATEFULL, ENABLE is enabled (which provides a subset of information available via 
DHCPV6 STATEFUL ENABLE) this implies that DHCPV6 STATELESS ENABLE should also be enabled. Value must be 
either Y (enabled) or М (disabled). 


DHCPV6. RAPID COMMIT is used when DHCPV6 STATEFUL ENABLE is enabled. It provides a reduction in the amount 
of DHCPv6 network traffic needed to assign addresses, but should not be used if more than one DHCPvó server is present 
in the network for the purpose of assigning addresses. DHCPvé6 database errors may result if more than one server can 
assign iLO an IPv6 address and Rapid Commit mode is enabled. Value must be either Y (enabled) or N (disabled). 


DHCPV6. SNTP SETTINGS specifies whether DHCPv6 Stateless-assigned NTP server addresses аге used or whether the 
user enters that information manually. Value must be either Y Cenabled) or N (disabled). 


DHCPV6. DNS. SERVER specifies whether the DHCPv6 Stateless-assigned DNS server adresses are used. Value must be 
either Y Cenabled) or N (disabled). 


DHCPV6. DOMAIN, NAME—Determines whether iLO uses the domain name provided by the DHCPvó server. Value must 
be either Y (enabled) or N (disabled). If both DHCP. DOMAIN. МАМЕ апа DHCPV6. DOMAIN. NAME are set їо N, iLO uses 
a static value for the domain name, which is set in DOMAIN, NAME. 


GET GLOBAL SETTINGS 


The GET GLOBAL SETTINGS command requests the respective iLO global settings. For this command to parse correctly, 
the command must appear within a БІВ INFO command block, and КІВ INFO MODE can be set to read. 
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Еог ехатр 


<RIBCL 


le: 


V 


«LOGIN 


«RIB 
«G 


US 


ER 


</RI 


</LOGIN> 


</RIBC 


L> 


ERSION="2.0"> 
,jOGIN-"adminname" PASSWORD="password"> 
| INFO MODE-" 
ET GLOBAL 
B INFO» 


ETTINGS/» 


СЕТ GLOBAL SETTINGS parameters 


None 


СЕТ. GLOBAL, SETTINGS runtime errors 


None 


GET, GLOBAL SETTINGS return messages 


A possible GET GLOBAL SETTINGS return message is as follows: 
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<ALERTMAIL EMAIL ADDRESS 


I 


VALUE="user@domain.com"/> 


<ALERTMATL SENDER DOMAIN 


VALUE="domain.com"/> 


<ALERTMAIL SMTP PORT VALUE="25"/> 
<ALERTMAIL SMTP SERVER VALUE="smtp.domain.com"/> 


I 


<PROPAGATE TIME TO HOST VALUE-"Y"/» 


<ІРМІ DCMI OVER LAN PORT 
</СЕТ GLOBAL SETTINGS» 


MOD GLOBAL, SETTINGS 


The MOD GLOBAL SETTINGS command modifies global settings. For this command to parse correctly, the command 
must appear within a RIB INFO command block, and RIB INFO MODE must be set to write. The user must have the 


VALUE="623"/> 


Configure iLO Settings privilege to execute this command. 


The iLO device (not the server) resets automatically to make changes to port settings effective. Setting the 
ILO FUNCT ENABLED to No disables the iLO management functions. To re-enable iLO functionality, use the UEFI 
System Utilities. For more information, see the UEFI System Utilities User Guide for HPE ProLiant Gen10 and Synergy 


Servers in the HPE Information Library at http://www.hpe.com/info/UEFI/docs. 


Use HPQLOCFG. EXE version 5.00 or later with the following scripts. 


Example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminn 
<КІВ INFO MODE="write" 
«MOD GLOBAL SETTING 
«SESSION TIMEOUT 


ame" PASSWORD="password"> 
» 

S» 

value="0"/> 


ED value="Yes"/> 


<F8 PROMPT ENABL 
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ЈЕ" 

S VALUE-"Y"/» 


WEBGUI STATUS VALUE-"Y"/» 


STATUS VALUE="Y"/> 
TATUS VALUE-"Y"/» 


HTTP PORT value-"80"/» 


е-"443"/> 
PORT value="17990"/> 
lue-"8"/» 
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ED value="Yes"/> 


<VIRTUAL MEDIA PORT value="17988"/> 


<F8 LOGIN REQUIR 


ED value-"No"/» 


<SSH_PORT value= 
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«SSH STATUS value="Yes"/> 


«SERIAL CLI STAT 
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«1-- iLO 


<!-- «AUTHENTICATION FAI 
<!-- «AUTHENTICATION FAI 


iD value="1"/> 


lue="Y"/> 
ue="N"/> 


ENTICATION FAILURE LOGGING value="3"/> 


upport information for next 2 tags: 
5 - All versions. 
4 - Version 2.30 and later. 


URE_DELAY SECS value="10"/> 
URES BEFORE DELAY value="1"/> 
Firmware support information for next 3 tags: 


<!-- iLO 5 
«1-- iLO 4 


- All versions. 
= 1.10 or later. 
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«/M 


«SNMP ACCESS ENABLED value - "No"/» 

«SNMP PORT value="161"/> 

«SNMP TRAP PORT value-"162"/» 

<!-- Firmware support information for next 7 tags: --> 
<1-- 110 5 - All versions. --> 
<!-- 110 4 - 1.20 or later. --> 

<REMOTE SYSLOG ENABLE VALUE="Yes"/> 

<REMOTE SYSLOG PORT VALUE="514"/> 

<REMOTE SYSLOG SERVER ADDRESS VALUE-"172.20.60.152"/» 

XALERTMAIL ENABLE VALUE-"yes"/» 

<ALERTMAIL EMAIL ADDRESS VALUE="user@domain.com"/> 

XALERTMAIL SENDER DOMAIN VALUE-"domain.com"/» 

XALERTMAIL SMTP SERVER VALUE-"smtp.domain.com" /» 

<!-- Firmware support information for next tag: --> 
<= iLO 5 - All versions. --> 
<!-- iLO 4 - 1.30 or later. --> 

XALERTMAIL SMTP PORT VALUE-"25"/» 

<!-- Firmware support information for next tag: n 
<1-- 110 5 - All versions. --> 
<!-- 110 4 - 1.20 or later. --> 
<!-- iLO 3 - 1.55 or later. --> 

<IPMI DCMI OVER LAN ENABLED value="y"/> 

<!-- Firmware support information for next tag: ==> 
<1=— 110 5 - All versions. --> 
<!-- 110 4 - 2.50 or later. --> 

<ІРМІ DCMI OVER LAN PORT value-"623"/» 

<!-- Firmware support information for next tag: m 
<1== 110 5 - All versions. --> 
<!-- 110 4 - 1.20 or later. --> 

«VSP LOG ENABLE VALUE-"yes" /> 

<!-- Firmware support information for next tag: --> 
<= iLO 5 - All versions. --> 
<!-- 110 4 - 1.30 or later. --> 
<!-- iLO 3 - 1.60 or later. --> 

<РКОРАСАТЕ TIME ТО HOST VALUE-"Y" /> 


OD GLOBAL SETTINGS» 


«/RIB INFO» 
«/LOGIN» 
«/RIBCL» 


NOTE: The parameters F8 PROMPT ENABLED and F8, LOGIN, REQUIRED refer to previously assigned function keys for 
starting UEFI/RBSU in earlier generations of HPE systems. For iLO 5, the key to press for this function has changed to F9 
(System Utilities). To ensure backward compatibility, the RIBCL parameter names have not been changed. 


The Virtual Serial Port supports automatically enabling and disabling software flow control. By default, this behavior is 
disabled. You can enable this configuration option using the RIBCL only. To enable this option, execute the following 


script: 


<КІВСІ V. 


«LOGIN 


US 


ERSION-"2.0"» 
ER 


,OGIN-"Administrator" PASSWOR 


<КІВ INFO MODE="write"> 


«MOD GLOBAL 
P SOFTWAR 


«VS 
«/MO 


SETTINGS» 


D GLO 


«RES 


E FLOW CONTROL value-"Yes" 
BAL SETTINGS» 


ET RII 


B /> 


«/RIB INFO» 


С] 


D="password"> 


/> 
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«/LOGIN» 
</RIBCL> 


MOD_GLOBAL_SETTINGS parameters 


The following parameters are optional. If you do not specify a parameter, then the parameter value for the specified 
setting is preserved. 


NOTE: If any port changes are detected, iLO reboots to apply the changes after the script has completed successfully. 


SESSION_TIMEOUT—Determines the maximum session timeout value in minutes. The accepted values are 0, 15, 30, 60, 
and 120. A value of O specifies infinite timeout. 


F8_PROMPT_ENABLED—Determines if the F8 prompt for ROM-based configuration appears during POST. The possible 
values are Yes or No. 


F8_LOGIN_REQUIRED—Determines if login credentials are required to access the RBSU for iLO. The possible values are 
Yes or Хо. 


NOTE: The parameters F8 PROMPT ENABLED апа F8_LOGIN_REQUIRED refer to previously assigned function keys for 
starting UEFI/RBSU in earlier generations of HPE systems. For iLO 5, the key to press for this function has changed to F9 
(System Utilities). To ensure backward compatibility, the RIBCL parameter names have not been changed. 


RIBCL STATUS— Specifies whether RIBCL commands can be used to communicate with iLO. This setting is enabled by 
default. Valid values are Yes or No. 


WEBSERVER STATUS-— Allows you to enable or disable access through the iLO web server. If you set this value to 
disabled, iLO will not listen for communication on the Web Server Non-SSL Port or the Web Server SSL port. The following 
features will not work when the web server is disabled: RIBCL, iLO RESTful API, remote console, iLO Federation, and the 
iLO web interface. Valid values are Yes or No. 


WEBGUI_STATUS— Specifies whether the iLO web interface can be used to communicate with iLO. This setting is enabled 
by default. Valid values are Yes or No. 


REMOTE CONSOLE STATUS-— Allows you to enable or disable access through the iLO remote consoles. Valid values аге 
Yes or No. 


VIRTUAL. MEDIA, STATUS— Allows you to enable or disable the iLO Virtual Media feature. Valid values are Yes or No. 
HTTP. PORT—Specifies the HTTP port number. 

HTTPS PORT —Specifies the HTTPS (SSL) port number. 

REMOTE CONSOLE PORT —Specifies the port used for remote console. 


MIN, PASSWORD-—Specifies how many characters are required іп all user passwords. The value can be from zero to 59 
characters. 


ILO_FUNCT_ENABLED—Determines if the Lights-Out functionality is enabled or disabled for iLO. The possible values аге 
Yes or No. This parameter is case insensitive. 


NOTE: After setting this parameter to No, you can use the UEFI System Utilities to re-enable iLO functionality. For more 
information, see the UEFI System Utilities User Guide for HPE ProLiant Gen10 and Synergy Servers in the HPE 
Information Library at http://www.hpe.com/info/UEFI/docs. 


VIRTUAL. MEDIA, PORT—Specifies the port used for virtual media. 
AUTHENTICATION FAILURE LOGGING—Specifies logging criteria for failed authentications. 


Possible values include: 
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e 0 -—bDisabled 

e 1 —Enabled (records every authentication failure) 

• 2 —Enabled (records every second authentication failure) 

• 3 —Enabled (records every third authentication failure: this is the default value.) 
e 5 —Enabled (records every fifth authentication failure) 


AUTHENTICATION FAILURE DELAY 5ЕС5--Тһе time, in seconds, that logging in is unavailable when the number of 
AUTHENTICATION. FAILURES, BEFORE. DELAY is reached. 


AUTHENTICATION, FAILURES. BEFORE DELAY—The number of times authentication can fail before logging in is 
unavailable for a period of time (set in AUTHENTICAITON. FAILURE. DELAY SECS). 


SSH. STATUS— Determines if SSH is enabled. The valid values are Yes or No, which enable or disable SSH functionality. 
SSH PORT—Specifies the port used for SSH connection їо iLO. The processor must be reset if this value is changed. 


SERIAL CLI STATUS—Specifies the status of the CLI. The possible values include: 


e 0 —М№о change 


1 —Disabled 


• 2 —Enabled (no authentication required) 


e 3 —Enabled (authentication required) 


SERIAL CLI SPEED—Specifies the CLI port speed. 


NOTE: The serial port speed set using this parameter must match the speed of the serial port set in the RBSU. 


The possible values include: 


e 0 —No change 

e 1—9,600 bps 

• 2—19,200 bps 

e 3--58,400 bps 

• 4—57,600 bps 

• 5—115,200 bps 

RBSU POST IP—Determines whether the iLO IP address is displayed during server POST process. The valid values are Y 
or 1 (enabled) and М or 0 (disabled). 


SNMP. ACCESS ENABLED-— Determines whether iLO should respond to external SNMP requests. Valid values are Y 
(enabled) or N (disabled). If disabled, the iLO Management Engine continues to operate and the information displayed in 
the iLO web interface is updated, but no alerts are generated and SNMP access is not permitted. 


SNMP. PORT —Sets the port used for SNMP communications. The industry standard (default) SNMP port is 161 for SNMP 
access. Value must be a valid port. 


SNMP. TRAP. PORT—Sets the port to which SNMP traps (alerts) are sent. The industry standard (default) SNMP trap port 
is 162. Value must be a valid port. 


REMOTE_SYSLOG_ENABLE—Determines whether iLO should send event notification messages to a Syslog server. Valid 
values are Y (enabled) or М (disabled) 
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REMOTE SYSLOG PORT Sets the port number through which the Syslog server listens. 


REMOTE 5Ү5І Об SERVER ADDRESS—Sets the IP address, FQDN, IPvó name, or short name of the server running the 
Syslog service. 


ALERTMAIL. ENABLE— Determines whether ILO should send alert conditions detected independently of the host 
operating system via email. The valid values are Y (enabled) or М (disabled). 


ALERTMAIL, EMAIL, ADDRESS—Sets the destination email address for iLO email alerts. Value must be a single email 
address no longer than 63 characters, and must be in standard email address format. 


ALERTMAIL, SENDER, DOMAIN-—Sets the domain name to be used in the sender (From) email address. Value is formed 
by using the iLO name as the hostname and the subject string as the domain name. If this value is left blank or not 
specified, the iLO domain name is used (which may not be accepted by all SMTP servers.) The maximum string length is 
63 characters. 


ALERTMAIL_SMTP_SERVER—Sets the IP address or DNS name of the SMTP server or the MSA. This server cooperates 
with the MTA to deliver the email. The maximum string length is 63 characters. Note that the SMTP server specified must 
support unauthenticated SMTP connections on port 25. 


ALERTMAIL. SMTP. PORT—Sets the port that the SMTP server uses for unauthenticated SMTP connections. The default 
value is 25. 


ІРМІ DCMI, OVER LAN, ENABLED—Determines whether you can send industry-standard IPMI and DCMI commands over 
the LAN using a client-side application. Server-side IPMI/DCMI applications are still functional even when this setting is 
disabled. The valid values are Y Cenabled) or N (disabled). 


ІРМІ ОСМІ OVER LAN, PORT —Sets the port used for IPMI communications. The industry standard (default) IPMI port is 
623. Valid value is between 1 and 65535. 


VSP. LOG ENABLE-— Determines whether the virtual serial port output from the server is captured. Valid values are Y 
(enabled) or N (disabled). The parameter is not case sensitive. 


PROPAGATE TIME TO HOST-—Determines whether iLO sets the system host time to match the iLO time. Valid values 
are Y Cenabled) or N (disabled). If enabled, the propagation time set occurs whenever the iLO is cold-booted. The 
parameter is not case sensitive. 


MOD GLOBAL, SETTINGS runtime errors 


Possible MOD GLOBAL SETTINGS error messages include: 


* The IPMI port value specified is invalid. Values supported are between 1 
and 65535. 


* The IPMI DCMI OVER LAN PORT value must not be left blank. 


* iLO information is open for read-only access. Write access is required for 
this operation. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 
* Unrecognized keyboard model. 


* The SNMP PORT value specified is invalid. Values supported are between 1 
and 65535. 


* The SNMP PORT value specified is invalid. This port number cannot be used. 


* The SNMP PORT value must not be left blank. 


* The SNMP TRAP PORT value specified is invalid. Values supported are between 
1 and 65535. 
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* The SNMP TRAP PORT value specified is invalid. This port number cannot be 


used. 


* The SNMP TRAP PORT value must not be left blank. 


* Error while reading or writing SNMP data. 


* iLO may not be disabled on this server. 


This message is sent if ILO FUNCT ENABLED is set to No and the system is a blade. 


A possible MOD. GLOBAL SETTINGS warning message includes: 


SNMP ACCESS is disabled, 


BROWNOUT RECOVERY 


Тһе BROWNOUT. RECOVERY command turns the brownout recovery feature on or off. For this command to parse 
correctly, it must appear within a КІВ INFO command block, and must appear within a MOD GLOBAL. SETTINGS 
command block. БІВ INFO MODE must Бе set to write. This command requires HPQLOCFG. EXE version 5.0 or later. 
The user must have the Configure iLO Settings privilege to execute this command. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"Administrator" PASSWORD-"password"» 
<КІВ INFO MODE-"write"» 


«MOD GLOBAL S 


«BROWNOUT К 


ETTINGS> 


ЕСОУ 


ERY VALUI 


SNMP PORT and SNMP TRAP PORT will not be changed. 


«/MOD GLOBAL SETT 


«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


INGS> 


BROWNOUT_RECOVERY parameters 


<BROWNOUT RECOVERY VA 


<BROWNOUT RECOVERY VA 


BROWNOUT_RECOVERY runtime errors 


None 


GET_SNMP_IM_SETTINGS 


Тһе GET SNMP IM, SETTINGS command requests the respective iLO SNMP IM settings. For this command to parse 
correctly, the GET_SNMP_IM_SETTINGS command must appear within а ВІВ INFO command block, апа КІВ INFO MODE 


can be set to read. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 


<КІВ INFO MODE- 
«GET SNMP IM 5 


«/RIB INFO» 
«/ LOGIN» 


Cc} 


"read"» 
ETTINGS/» 


E="Yes"/> 


UE="No"/>—Disables brownout recovery 


UE="Yes"/>—Enables brownout recovery 
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</RIBCL> 


GET_SNMP_IM_SETTINGS parameters 


None 


GET_SNMP_IM_SETTINGS runtime errors 


None 


GET_SNMP_IM_SETTINGS return messages 


A possible GET_SNMP_IM_SETTINGS return message is: 


<GET 5 
<5 
<5 
<5 
<5 
<5 
<S 
<S 
<S 
<S 
<S 
<S 
<S 
<S 
<T 


<AGENTLESS 


</ 
<5 


</ 
<5 


Cc} 


NMP ETTINGS> 


ESS VALUE="Ena 


S 
11 02 


ММР 


D 
Q 


ble"/» 


NMP 


D 


VALUE=" 


NMP 


D 


NMP 


D 


NMP 


D 


NMP 


NMP 


D 


NMP 


D 


NMP 


D D 
ооооооооо 


ММР ESS 3 TRAPCOM 


D 


NMP 


< 
оз 


"/> 
NITY VALUE=""/> 

MUNITY VERSION-"" VA 
"/> 
ITY VALUE=""/> 
MUNITY VERSION-"" VA 
"/> 
NITY VALUE=""/> 
M RSION-"" VA 


El c 


UNITY V 
E=" "/> 


ORT VALUE="161"/ 
VALUE=" 


NMP 


NMP 


он т 
z 
U 


5 


> 
162"/> 


VALUE-"iLO Hostname"/> 


OURCE IDENTIFIER 
TRAPS VALUE="Y"/> 

E="N"/> 
OLD_START_TRAP_BROADC 
Vl VALUE-"Y 
P PASSTHROUGH STATU 
AGENT IP ADDRESS V. 


AST VALUE-"Y"/» 
"/> 
5 VALUE- 
ALUE-""/» 


"М" /> 


а 


Е=""3"/> 


SECURITY MASK УА 
P SYS CONTACT VALUE 


P SYS LOCATION 


VALUE 


T MANAGEMENT E 


| VALUE-"Y"/» 


P SYSTEM ROLE VA 


ШЕ =" " /> 


м 
NMP SYSTEM ROLE DETAI 
MP USER PROFILE INDE 


Х="1"> 


«SECURITY NAME VALU 


Е "" "" /> 


UE="0"/> 


U 
<AUTHN PROTOCOL VAL 
<AUTHN PASSPHRASE 


VALUE-""/» 


VA 


«PRIVACY PROTOCOL 


СЕ-" 0 " /> 


XPRIVACY PASSPHRASE 


VALUE=""/> 


SNMP_USER_PROFILE> 
NMP USER PROFILE INDE 


Х="2"> 


«SECURITY МАМЕ VALU 


pnm" /> 


UE2"0"/» 


U 
<AUTHN PROTOCOL VAL 
<AUTHN PASSPHRASE 


VA 


UE=" " /> 


<PRIVACY PROTOCOL 


VA 


UE=" 0 " /> 


VALUE-""/» 


«PRIVACY PASSPHRASE 
SNMP USER PROFILE» 
NMP USER PROFILE INDE 


Б. 


Х-"3"> 
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«SECURITY NAME VALUE-""/» 
«AUTHN PROTOCOL VALUE="0"/> 
<АОТНЫ PASSPHRASE VALUE-""/» 
«PRIVACY PROTOCOL VALUE="0"/> 
«PRIVACY PASSPHRASE VALUE-""/» 


«/SNMP USER PROFI 


«/GET SNMP IM Sl 


E> 
ETTINGS> 


MOD_SNMP_IM_SETTINGS 


MOD_SNMP_IM_SETTINGS is used to modify SNMP and Insight Manager settings. For this command to parse correctly, 
the command must appear within a ВІВ INFO command block, апа RIB_INFO MODE must Бе set to write. The user must 
have the Configure iLO Settings privilege to execute this command. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO ODE="write"> 
<MOD SNMP IM SETTINGS> 


«WEB AGENT ІР ADDRESS VALUE=""/> 


«SNMP ADDRESS 1 VALUE-"192.168.125.121"/» 
«SNMP ADDRESS 2 VALUE-"192.168.125.122"/» 
«SNMP ADDRESS 3 VALUE-"192.168.125.123"/» 


«OS TRAPS 


VALUE="No"/> 


«SNMP PASSTHROUGH STATUS VALUE="No"/> 
<КІВ TRAPS VALUE="No"/> 

<СІМ SECURITY MASK VALUE="3"/> 
Firmware support information for the below tags: --> 


<!-- 


«SNMP ADDRESS 1 ROCOMMUNITY VAL 
«SNMP ADDRESS 1 TRAPCOMMUNITY V 
«SNMP ADDRESS 2 ROCOMMU 
«SNMP ADDRESS 2 TRAPCOMMUNITY V 
«SNMP ADDRESS 3 ROCOMMUNITY VAL 
«SNMP ADDRESS 3 TRAPCOMMUNITY V 


110 5 - 1.10 or later. 
iLO 4 - All versions. 
iLO 3 - None. 
iLO 2 - None. 


E="publici"/> 


U 

NITY VALUE="public2"/> 
UE-"public3"/» 
FE 


<AGENTLESS MANAGEMENT ENABLE value="Yes"/> 


<SNMP_SYS_CONTACT VALUE="Mr. System Administrator"/> 
<SNMP_SYS_LOCATION VALUE="HP Data Center, Hockley, TX"/> 


RSION-"v1" VALUE-"trapcomml"/» 
RSION-"v2c" VALUE="trapcomm2"/> 


RSION-"1" VALUE="trapcomm3"/> 


«SNMP SYSTEM ROLE VALUE-"Brief Role Description [60 characters]"/> 
«SNMP SYSTEM ROLE DETAIL VALUE-"Extended role description 


«COLD START TRAP BROADCAST value-"No"/» 


«1-- 
<!-- 


«TRAP SOURCE 


Firmware support information for next tag: 
110 5 - 1.10 or later. 
iLO 4 - 1.10 or later. 
iLO 3 - None. 
iLO 2 - None. 


Acceptable values for TRAP SOURCE IDENTIFIE 
iLO Hostname, OS Hostname 
_ IDENTIFIER value = "iLO Hostname"/> 
Firmware support information for next tags: 
ih 
p 
d 


iLO 5 - 1.10 or later. 
iLO 4 - 1.20 or later. 
iLO 3 - None. 
iLO 2 - None. 


Acceptable values for AUTHN PROTOCOL: 0 or 1 


0 is for MD5, 1 is for SHA 


[500 characters]"/» 
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<!-- Acceptable values for PRIVACY PROTOCOL: 0 or 1 
«1-- 0 is for DES, 1 is for AES 


«SNMP ACCESS ENABLED va 


«SNMP PORT value-"161"/ 
«SNMP TRAP PORT value=" 
«SNMP V1 TRAPS VALUE-"Y 


«SNMP V3 ENGINE 


ID VALU 


lue = "Y"/» 

> 

162"/> 

es"/> 
E-"0x12345678"/» 


«SNMP USER PROFI 


i& INDE 


«SECURITY МАМЕ 


VALUE- 


«AUTHN PROTOCOL 
<АОТНМ PASSPHRASE УА 
«PRIVACY PROTOCOL УА 


VALUE 


Х = "1"> 
"Security Name 1"/> 
-"0" /> 


jUE-"Authentication Pass Phrase 1"/» 
;UE2"0"/» 


«PRIVACY PASSPHRASE VALUE-"Privacy Pass Phrase 1"/> 


«/SNMP USER PROFILE» 


«SNMP USER PROFIL 


«SECURITY NAMP 


«AUTHN PROTOCOL 
<АОТНМ PASSPHRASE УА 
«PRIVACY PROTOCOL УА 


«PRIVACY PASSP 


EX = "2"> 


"Security Name 2"/> 


ІП ="0"/> 


UUE="Authentication Pass Phrase 2"/> 


UE="0"/> 


HRASE VALUE="Privacy Pass Phrase 20"/> 


</SNMP_USER_PROFILE> 


<SNMP_USER_PROFI 


i& INDE 


<SECURITY NAME 


VALUE= 


<АОТНМ PROTOCOL 
<АОТНМ PASSPHRASE УА 
«PRIVACY PROTOCOL УА 


«PRIVACY PASSP 


VALUE 


X = "3"> 
"Security Name 3"/> 
="0)" /> 


UE="Authentication Pass Phrase 3"/» 


JUE-" 0" /» 


HRASE VALUE-"Privacy Pass Phrase 3"/» 


«/SNMP USER PROFILE» 


«/MOD SNMP IM SETTINGS» 


«/RIB INFO» 
</LOGIN> 
</RIBCL> 


MOD_SNMP_IM_SETTINGS parameters 


--> 


All of the following parameters are optional. If a parameter is not specified, then the parameter value for the specified 


setting is preserved. 


SNMP. ADDRESS 1, SNMP. ADDRESS 2, and SNMP ADDRESS 53 are the addresses that receive traps sent to the user. 


Each of these parameters can be any valid IP address. 


SNMP ADDRESS 1 ROCOMMUNITY, SNMP ADDRESS 2 ROCOMMUNITY, and SNMP ADDRESS 3 ROCOMMUNITY 
configure the SNMP read-only community string. Values can include a community string, optionally followed by an IP 


address or FQDN. 


SNMP ADDRESS 1, TRAPCOMMUNITY, SNMP. ADDRESS. 2 TRAPCOMMUNTIT Y, and 
SNMP. ADDRESS. 5 TRAPCOMMUNITY configures the SNMP trap community string. 


RIB TRAPS determines if the user is allowed to receive SNMP traps that are generated by the RIB. The possible values are 
Yes and No. By default, the value is set to No. 


SNMP. SYS CONTACT specifies the system administrator or server owner. The string can be a maximum of 49 characters 
long, and can include information such as a name, email address, or phone number. 


SNMP. SYS LOCATION specifies the physical location of the server. The string can be a maximum of 49 characters long. 


SNMP SYSTEM. ROLE describes the server role or function, and can be a maximum of 64 characters long. 


SNMP. SYSTEM ROLE DETAIL describes specific tasks the server might perform, and can be a maximum of 512 


characters long. 


СІМ SECURITY MASK accepts the integers 0-4. The possible values are: 


Cc} 
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• 0—No change 

e 1—None (по data is returned) 

• 2,3, 5—Enabled (medium — 3) 

COLD. START TRAP BROADCAST specifies whether to broadcast to the subnet broadcast IP address if there are no trap 
destinations configured for SNMP ADDRESS 1, SNMP ADDRESS 2, or SNMP ADDRESS 3. Valid values are Yes or No. 


TRAP. SOURCE IDENTIFIER allows the substitution of the OS Hostname for the sysName when SNMP traps are 
generated from iLO. Value must be a valid iLO hostname or OS hostname. 


SNMP. ACCESS ENABLED enables SNMP access. Valid values are Y (enabled) and М (disabled). 
SNMP. PORT sets the port on which SNMP should communicate. 

SNMP. TRAP. PORT sets the port on which SNMP traps are sent. 

SNMP. V1 TRAPS sets whether 5ММРУ1 traps are sent. Valid values are Y and М. 


SNMP V3 ENGINE ID sets the unique identifier of an SNMP engine belonging to a SNMP agent entity. Value must be 
hexadecimal string, between 6 апа 32 characters long (for example, Ox01020304abcdef). The value must be an even 
length, excluding the preceding “Ох.” 


SNMP USER PROFILE INDEX sets the number (1, 2, or 3) for one of three available user profiles for SNMPv3 
authentication, and includes the following: 


e SECURITY NAME sets the user profile name. Value must be 1 to 32 alphanumeric characters long, and must have no 
spaces. 


e AUTHN PROTOCOL sets the message digest algorithm to use for encoding the authorization passphrase. The 
message digest is calculated over an appropriate portion of an SNMP message and included as part of the message 
sent to the recipient. Valid values аге 0 (for MD5) or 1 (for SHA). 


e AUTHN PASSPHRASE sets the passphrase to be used for sign operations. Value must be 8 to 49 characters long. 


e PRIVACY PROTOCOL sets the encryption algorithm to be used for encoding the privacy passphrase. A portion of an 
SNMP message in encrypted before transmission. Valid values are 0 (for DES) ог 1 (for AES). 


e . PRIVACY PASSPHRASE sets the passphrase used for encrypt operations. Value must be 8 to 49 characters long. If 
this value is omitted, the value for AUTHN, PASSPHRASE is used. 


NOTE: The following tags are deprecated in iLO 5: 
e (05 TRAPS, 

e АСЕМТІ Е55 MANAGEMENT ENABLE, 

e . WEB AGENT ІР ADDRESS апа 


e SNMP РА55ТНКООСН STATUS 


MOD SNMP ІМ SETTINGS runtime errors 


Possible MOD SNMP IM SETTINGS error messages include: 


* RIB information is open for read-only access. Write access is required for 
this operation. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


e The TRAP SOURCE IDENTIFIER value must not be left blank. 


Cd RIBCL XML Scripting Language 119 


т 


e TRAP SOURC 


IDENTIFIER VALUE is too long. 


* The value specified is invalid. 


e SNMP V1 Traps can not be disabled in SNMP Pass-thru mode. 


* SNMP V3 ENGINE VALUE is too long. 


* SECURITY NAME VALUE is too long. 


UTHN PROTOCOL valid values are 0:MD5 or 1:SHA. 


A 
e AUTHN PROTOCOL can not be left blank. 
A 


UTHN PASSPHRASE VALUE is too long. 


e PRIVACY PROTOCOI 


Gl 
о 


L valid values are 0:DES or 1:Al 


e PRIVACY PROTOCOI 


L can not be left blank. 


* PRIVACY PASSPHRASE VALUE is too long. 


* PRIVACY PASSPHRASE VALUE needs a minimum of 8 characters. 


* INDEX can not be left blank. 


SEND SNMP TEST TRAP 


Use the SEND SNMP TEST TRAP command to send a test SNMP trap to the configured alert destinations. For this 


command to parse correctly. 
set to write. 


For example: 


<RIBCL VERSION="2. 


, the command must appear within a БІВ ІМЕО command block, апа БІВ ІМЕО MODE must be 


ON > 


«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<RIB INFO MODE-"Write"» 


«/RIB INFO» 
</LOGIN> 
</RIBCL> 


SEND_SNMP_TEST_TRAP run 


e iLO information 
this operation. 


«SEND SNMP TEST TRAP/» 


time errors 


is open for read-only access. Write access is required for 


* User does NOT have correct privilege for action. CONFIG ILO PRIV required. 


* The iLO is not configured for this command. 


* Internal error. 


* Error while reading or writing SNMP data. 


SEND SNMP TEST TRAP return messages 


No information is returned other than ano error message. 
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MOD ENCRYPT SETTINGS 


The MOD ENCRYPT SETTINGS command is used to set the communication settings for the Enterprise Secure Key 
Manager (ESKM). For this command to parse correctly, the command must appear within a RIB INFO command block, and 
RIB INFO MODE must be set to write. The user must have the Configure iLO Settings privilege to execute this command. 
For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE-"write"» 
«MOD ENCRYPT SETTINGS» 
ESKM USER LOGIN VALUE-"username"/» 
PASSWORD VALUE="password"/> 
LO GROUP NAME VALUE-"groupname"/» 
ESKM CERT NAME VALUE-"certname"/» 
E REDUNDANCY VALUE - XT 
ESKM PRIMARY SERVER ADDRESS VALUE-"0.0.0.0"/» 
ESKM PRIMARY SERVER PORT VALUE="0"/> 
!-- Secondary Server Address & Port values are optional --> 
KM SECONDARY SERVER ADDRESS VALUE-""/» 
ESKM SECONDARY SERVER PORT VALUE-""/» 
«/MOD ENCRYPT SETTINGS» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


H ІН Ы | 
о 
A 
= 


лллллллллл о 
z 
Di 
w 
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IMPORTANT: Incorrect or mismatched port settings can disable the ability to connect to the iLO. Verify the values 
before executing this command. 


MOD_ENCRYPT_SETTINGS parameters 


ESKM_USER_LOGIN is the Local User name with administrator permissions that is configured on the ESKM. This is the 
ESKM deployment user. This parameter is case sensitive and must not be blank. 


ESKM PASSWORD is the password for the Local User name with administrator permissions that is configured on the 
ESKM. This parameter is case sensitive and can be a combination of any printable characters. 


ESKM. CERT. МАМЕ is the name of the local certificate authority certificate in ESKM. It is typically named Local CA. iLO will 
retrieve the certificate and use it to authenticate the ESKM server(s) for all transactions going forward. 


ILO GROUP NAME is the Local Group created on the ESKM for use with iLO user accounts and the keys iLO imports into 
the ESKM. When keys are imported, they are automatically accessible to all devices assigned to the same group. 


ENABLE, REDUNDANCY determines whether redundancy is enabled. Valid values are Y (enabled) or N (disabled). 


ESKM PRIMARY SERVER ADDRESS is the IP address of the main ESKM server. The value must be a valid IP address. If 
this parameter is empty or left blank then it will clear an already set ESKM primary server address. 


Е5КМ. PRIMARY SERVER PORT is the port on which to communicate with the main ESKM server. The value must be a 
valid port number from 1 to 65535. If this parameter is empty or left blank then it will clear an already set ESKM primary 
server port. 


Е5КМ. SECONDARY SERVER ADDRESS is the IP address of a secondary (backup) ESKM server. The value must be valid 
IP address, however if this parameter is not used it can be left blank. 


Е5КМ SECONDARY SERVER PORT is the port on which to communicate with the secondary ESKM server. The value 
must be a valid port number from 1 to 65555, however if this parameter is not used it can be left blank. 
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MOD ЕМСВҮРТ SETTINGS runtime errors 


Possible MOD ENCRYPT. SETTINGS error messages include: 


Lr] 


U 


* The ESKM USER LOGIN VA is too long. 


* The ESKM USER LOGIN VALUE must not be left blank. 


* The ESKM PASSWORD VALUE is too long. 


* The ESKM PASSWORD VALUE must not be left blank. 


* The ILO GROUP NAME VALUE is too long. 


* The ILO GROUP NAME VALUE must not be left blank. 


* The ESKM PRIMARY SERV 


I 


ІК ADDRESS VALUE is too long. 


* The ESKM PRIMARY SERVER PORT VALUE specified is invalid. Values supported 


are between 1 and 65535. 


т 


* The Е5КМ SECONDARY SERVER ADDRESS VALUE is too long. 


* The ESKM SECONDARY SERVER PORT VALUE specified is invalid. Values supported 
are between 1 and 65535. 


GET ENCRYPT SETTINGS 


Use the GET ENCRYPT SETTINGS command to display the current encryption settings for a Lights-out device. For this 
command to parse correctly, the command must appear within a БІВ INFO command block, апа БІВ INFO MODE must be 
set to read. For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="read"> 
«GET ENCRYPT SETTINGS/» 
</ҺІВ INFO» 
«/LOGIN» 
</RIBCL> 


The following operations are performed to verify the configuration settings before displaying the primary and secondary 
ESKM server details: 


• iLO connects to the primary ESKM server (апа secondary ESKM server, if configured) over SSL. 
e iLO tries to authenticate to the ESKM by using the configured credentials and account. 


e ПО confirms that the version of the ESKM software is compatible with iLO. 


If any of the operations fail, the primary and secondary ESKM server details are displayed as NULL even though they are 
configured in iLO. 


GET_ENCRYPT_SETTINGS parameters 


None 


GET_ENCRYPT_SETTINGS runtime errors 


None 
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СЕТ ENCRYPT SETTINGS return messages 


Possible GET ENCRYPT SETTINGS return messages includes: 


<RIBCL VERSION="2.23"> 

«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 

/> 

«GET ENCRYPT SETTINGS» 
XENABLE REDUNDANCY VALUE="N"/> 
<ESKM CERT NAME VALUE=""/> 
<ESKM PRIMARY SERVER ADDRESS VALUE=""/> 
<ESKM PRIMARY SERVER PORT VALUE="0"/> 
<Е5КМ SECONDARY SERVER ADDRESS VALUE=""/> 
<ESKM SECONDARY SERVER_PORT VALUE="0"/> 
<Е5КМ АСС NAME VALUE-"ilo-fcl5b4975e90"/» 
<Е5КМ CERT ISSUER VALUE-""/» 
<Е5КМ CERT SUB VALUE-""/» 
<ESKM СКР NAME VALUE-""/» 

«/GET ENCRYPT SETTINGS» 


UPDATE, RIB, FIRMWARE and UPDATE FIRMWARE 


The UPDATE FIRMWARE or UPDATE RIB FIRMWARE command copies a specified file to iLO, starts the upgrade process, 
and reboots the board after the image has been successfully flashed. 


Note that the two commands are used to update different components: 
* UPDATE КІВ FIRMWARE flashes only the iLO firmware. 


• UPDATE FIRMWARE flashes other components, such as the CPLD, Power РІС, ROM, апа more. 


WARNING: Do not use both the UPDATE RIB. FIRMWARE and the UPDATE FIRMWARE commands in the same 
script. 


For this command to parse correctly, the command must appear within a RIB INFO command block, and RIB INFO MODE 
must be set to write. The user must have the Configure iLO Settings privilege to execute this command. 


Example 1: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 


«RIB INFO MODE="write"> 
<!-- Firmware support information for next tag: --> 
<1-- 110 5 - All versions. For servers with ТРМ enabled. --> 
<і-- 110 4 - All versions. For servers with TPM enabled. --> 
«1-- iLO 3 - All versions. For servers with TPM enabled. --> 
<1-- iLO 2 - 1.70 and later. For servers with TPM enabled. --> 
<TPM ENABLED VALUE="Yes"/> 


<UPDATE_ RIB FIRMWARE IMAGE _LOCATION="<path>\<firmware_filename>"/> 
</RIB_INFO> 
</LOGIN> 
</RIBCL> 


When you send an XML script to update firmware, it verifies the Trusted Platform Module (TPM) configuration status of 
option ROM measuring. If it is enabled, the iLO firmware returns the same warning message as stated in the web interface. 
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You сап add the TPM ENABLE command to the script file. Hewlett Packard Enterprise recommends using XML script 
syntax to execute firmware updates. To enable the firmware update to continue, you must set TPM, ENABLE to a value of 
Y or Yes. 


Example 2: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
<КІВ INFO MODE-"write"» 
«TPM ENABLE -"Yes"/» 
«UPDATE FIRMWARE IMAGE LOCATION="<path>\<firmware filename>"/> 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


UPDATE_FIRMWARE parameters 
IMAGE_LOCATION is the full path file name of the firmware upgrade file. 


TPM_ENABLE enables the firmware to continue updating when the option ROM measuring is enabled. To enable the 
firmware update to continue, you must set TPM_ENABLE fo a value of Y or Yes. 


UPDATE_FIRMWARE runtime errors 


Possible UPDATE_FIRMWARE error messages include: 


* iLO information is open for read-only access. Write access is required for 
this operation. 


“ Unable to open the firmware image update file. 


* Unable to read the firmware image update file. 
* The firmware upgrade file size is too big. 

* The firmware image file is not valid. 

* A valid firmware image has not been loaded. 


* The flash process could not be started. 


T 


e IMAGE LOCATION must not be blank. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


NOTE: If an attempt to use this command fails with errors that involve write access operations, syntax, logins, or 
configuration privileges, wait for at least 60 seconds before trying again. 


СЕТ FW. VERSION 


Тһе GET FW. VERSION command requests the respective iLO firmware information. For this command to parse correctly, 
the command must appear within a БІВ INFO command block, and RIB. INFO MODE must be set to read. The user must 
have the Configure iLO Settings privilege to execute this command. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE="read"> 
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«GET FW VERSION/» 
«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


GET_FW_VERSION parameters 


None 


GET_FW_VERSION runtime errors 


None 


GET_FW_VERSION return messages 


The following information is returned within the response: 


«GET FW VERSION 
FIRMWARE VE firmware version 
FIRMWARE DATE = firmware date 
MANAGEMENT PROCESSOR = management processor type 
LICENSE TYPE = iLO license type 


T 


"d 
о 
n 
O 
z 
ll 


/> 


LICENSE 


The LICENSE command activates or deactivates iLO advanced features. For this command to parse correctly, the 
command must appear within а ВІВ INFO command block, апа ВІВ INFO MODE must be set to write. The user must һауе 
the Configure iLO Settings privilege to execute this command. 


NOTE: For more information see the HPE iLO Licensing Guide at: 


http://www.hpe.com/support/iLOLicenseGuide-en 


You do not have to use a licensing key on a ProLiant BL Class server. Advanced features are automatically activated. 


For example: 


<RIBCL VERSION="2.0"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE="write"> 
<LICENSE> 
<ACTIVATE KEY="1111122222333334444455555"/> 
</LICENSE> 
Id RIB INFO» 
«/LOGIN» 
</RIBCL> 


LICENSE parameters 
ACTIVATE KEY followed by a valid value signals the activation of the iLO advanced pack licensing. 


KEY specifies the license key value. The key must be entered as one continuous string. Commas, periods, or other 
characters must not separate the key value. The key only accepts 25 characters; other characters entered to separate key 
values are interpreted as a part of the key, and results in the wrong key being entered. 
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LICENSE runtime errors 


Possible LICENSE error messages include: 


* License key error. 


* License is already active. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


INSERT, VIRTUAL, MEDIA 


This command notifies iLO of the location of a diskette image. The INSERT. VIRTUAL MEDIA command must display 
within a КІВ INFO element, and ВІВ INFO must be in write mode. You must purchase the iLO Advanced license to enable 
this feature. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 


<КІВ INFO MODE-"write"» 

<!-- Firmware support information for next tag: --> 
<!-- iLO 5 - All versions. For servers with TPM enabled.--> 
«1-- iLO 4 - All versions. --> 
<1-- 110 3 - All versions. --> 
«1-- iLO 2 - All versions. --> 
<INSERT VIRTUAL MEDIA DEVICE-"FLOPPY" IMAGE URL-"http://«URL»" /> 


«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


INSERT_VIRTUAL_MEDIA parameters 


DEVICE specifies the Virtual Media device target. The possible values are FLOPPY or CDROM. If the DEVICE is not 
specified, FLOPPY is assumed. This value is case-sensitive. 


IMAGE_URL specifies the URL for the diskette image. The URL format is as follows: 


protocol://username: password@hostname:port/filename, cgi-helper 


* protocol is mandatory and must be either http or https. 
• username :password is optional. 

* hostname is mandatory. 

* port is optional. 

* filename is mandatory. 


e cgi-helper is optional. This enables the virtual floppy to be writable. 
In addition, the filename field can contain tokens that expand to host-specific strings: 


• %m expands to the iLO MAC address. 
e $i expands to the iLO IP address in dotted-quad form. 


e $h expands to the iLO hostname. 
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Еог ехатріе: 


http://john:abci2380imgserver.company.com/disk/win98dos.bin,/cgi-bin/ 
hpvfhelp.pl 


http://imgserver.company.com/disk/boot£m.bin 
This command specifies only the location of the image to be used. For the image to be connected to the server, the 
appropriate BOOT OPTION must be specified using the SET VM STATUS command. If BOOT OPTION is set to 
BOOT ONCE and the server is rebooted, any subsequent server reboots eject the image. 

INSERT VIRTUAL, MEDIA runtime errors 
The possible INSERT VIRTUAL MEDIA error messages include: 


* iLO information is open for read-only access. Write access is required for 
this operation. 


T 


* IMAGE URL must not be left blank. 


* User does not have correct privilege for action. VIRTUAL MEDIA PRIV 
required. 


* Unable to parse Virtual Media URL 


* Ап invalid Virtual Media option has been given. 


* Virtual Media already connected through a script. You must eject or 
disconnect before inserting new media. 


ЕЛЕСТ VIRTUAL. MEDIA 


EJECT VIRTUAL MEDIA ejects the Virtual Media image if one is inserted. The ЕЛЕСТ VIRTUAL MEDIA command must 
display within а КІВ INFO element and ВІВ INFO must be in write mode. You must purchase the iLO Advanced license to 
enable this feature. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE="write"> 


<1-- Firmware support information for next tag: --> 
<!-- 110 4 - All versions. --> 
«== 110 3 - All versions. ==> 
<!-- iLO 2 - All versions. --> 
<ЕСЕСТ VIRTUAL MEDIA DEVICE="FLOPPY"/> 


</RIB_INFO> 
</LOGIN> 
</RIBCL> 


EJECT_VIRTUAL_MEDIA parameters 


DEVICE specifies the Virtual Media device target. The possible values are FLOPPY or CDROM. If the DEVICE is not 
specified, FLOPPY is assumed. This value is case-sensitive. 


EJECT_VIRTUAL_MEDIA runtime errors 


Possible EJECT_VIRTUAL_MEDIA errors are: 
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* iLO information is open for read-only access. Write access is required for 


this operation. 


* User does not have correct privilege for action. VIRTUAL MEDIA PRIV 
required. 


* No image present in the Virtual Media drive. 


* Ап invalid Virtual Media option has been given. 


GET. VM STATUS 
GET. УМ STATUS returns the Virtual Media drive status. This command must display within a RIB. INFO element. 
For example: 
<RIBCL VERSION="2.0"> 


«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE-"read"» 


<1-- Firmware support information for next tag: --» 
<1-- 110 5 - All versions. For servers with ТРМ enabled. --> 
<!-- iLO 4 - All versions. --» 
<!-- 110 3 - All versions. --> 
<!-- 110 2 - All versions. --» 


«GET VM STATUS DEVICE-"FLOPPY"/» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


GET_VM_STATUS parameters 


DEVICE specifies the Virtual Media device target. The possible values are FLOPPY or CDROM. If the DEVICE is not 


specified, FLOPPY is assumed. These values are not case-sensitive. 


GET_VM_STATUS runtime errors 


The possible GET_VM_STATUS error is: 


An invalid Virtual Media option has been given. 


GET_VM_STATUS return messages 


The return message displays the current state of the Virtual Media. The VM_APPLET parameter shows if a virtual media 


device is already connected through the Integrated Remote Console, Java Integrated Remote Console, or the iLO 


graphical interface. If the УМ APPLET = CONNECTED, then the (non-URL based) Virtual Media is already in use and 


cannot be connected through scriptable Virtual Media or Virtual Media XML commands. 


NOTE: Only URL-based Virtual Media can be connected through scriptable Virtual Media or Virtual Media XML. However, 
URL-based Virtual Media will display as DISCONNECTED through VM, APPLET even if an URL-based VM is configured via 


the iLO, Integrated Remote Console, Java Integrated Remote Console, CLI, or RIBCL. 


The DEVICE parameter tells which device this return message is for. The BOOT OPTION shows the current setting; 
BOOT ALWAYS means that the server always use the Virtual Media device for booting, BOOT ONCE means that the 
server boots to the Virtual Device once and then disconnects the Virtual Media on the subsequent server reboot, and 


NO BOOT means that the Virtual Media does not connect during a server reboot. The WRITE PROTECT FLAG parameter 
shows if the Virtual Media image can be written to. The IMAGE INSERTED parameter tells if the Virtual Media device is 


connected via the scriptable Virtual Media or the Virtual Media XML command. 
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A possible GET VM STATUS return message is: 


VM APPLET - CONNECTED | DISCONNECTED 
DEVICE = FLOPPY | CDROM 

BOOT OPTION - BOOT ALWAYS | BOOT ONCI 
W 

I 

I 


ІЗІ 


| NO BOOT 


| PROTECT FLAG = YES | NO 
MAGE INSERTED - YES | NO 
MAGE U 


RL=" <URL>" 


NOTE: If the BOOT ONCE boot option is selected, all scriptable virtual media parameters are reset to default settings 
after the server boots. Specifically BOOT. OPTION = МО ВООТ, WRITE PROTECT = NO, and IMAGE INSERTED = NO. 


SET VM STATUS 


The SET. VM, STATUS command sets the Virtual Media drive status. This command must appear within a RIB INFO 
element, and RIB INFO must be set to write. All the parameters in the command are optional. You must purchase the iLO 
Advanced license to enable this feature. 


For example: 


<RIBCL VERSION="2.0"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE="write"> 
«SET VM STATUS DEVICE-"FLOPPY"» 
«VM BOOT OPTION VALUE-"BOOT ONCE"/» 
«VM WRITE PROTECT VALUE-"YES" /» 
«/SET VM STATUS» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


SET_VM_STATUS parameters 


DEVICE specifies the Virtual Media device target. The possible values are FLOPPY or CDROM. If the DEVICE is not 
specified, FLOPPY is assumed. The value is not case-sensitive. 


VM_BOOT_OPTION specifies the connection and boot option parameter for the Virtual Media. 


CONNECT and DISCONNECT are two possible values for УМ BOOT OPTION. The CONNECT and DISCONNECT settings 
can be used to control the Virtual Media devices in the same way that they are controlled in the Virtual Media applet. 
Whenever the CONNECT or DISCONNECT parameters are set, the Virtual Media device immediately connects or 
disconnects, respectively, to the server. Before setting any additional boot options as described below, connect the image 
by setting the VM_BOOT_OPTION value to CONNECT. 


Other possible values for VM_BOOT_OPTION include BOOT_ALWAYS, BOOT_ONCE, ог NO_BOOT. These values control 
how the Virtual Media device behaves during the boot phase of the server. Setting these values does not affect the 
current state of the Virtual Media device. These settings only take affect if the Virtual Media device is connected at server 
boot. 


• CONNECT sets the VM_BOOT_OPTION to CONNECT. The Virtual Media device is immediately connected to the 
server. Setting the VM, BOOT OPTION to CONNECT is equivalent to clicking the device Connect button on the Virtual 
Media Applet. After setting the VM. BOOT OPTION to CONNECT, the VM. GET STATUS command shows the 
VM. BOOT OPTION as BOOT ALWAYS. This is by design and shows that the Virtual Media device is connected like 
the Virtual Media device in the applet which is always connected during all server boots. 


е DISCONNECT sets the VM, BOOT. OPTION to DISCONNECT. The Virtual Media device is immediately disconnected 
from the server. Setting the VM. BOOT OPTION to DISCONNECT is equivalent to clicking the device Disconnect 
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button on the Virtual Media Applet. Additionally, setting the VM BOOT OPTION to DISCONNECT is equivalent to 
issuing the EJECT. VIRTUAL MEDIA command. When the VM, BOOT OPTION is set to DISCONNECT, the Virtual 
Media device does not connect and the following Virtual Media device settings are reset to their default values: 


о 


о 


ВООТ OPTION - NO ВООТ 


IMAGE INSERTED - NO 


е BOOT ALWAYS sets the VM, BOOT OPTION to BOOT ALWAYS. The Virtual Media device is always connected during 
server boot. The Virtual Media device is not connected immediately when the VM, BOOT. OPTION is set. The Virtual 
Media device is connected on the next server boot after setting of the VM BOOT OPTION. 


е BOOT ONCE sets the VM, BOOT OPTION to BOOT ONCE. The Virtual Media device is connected during the next 
server boot, but on any subsequent server boots, it does not connect. The BOOT ONCE option is intended to boot one 
time to the Virtual Media device, use that device while the server is running, and then not have the Virtual Media 
device available on subsequent server reboots. The Virtual Media device is not connected immediately when the 
VM BOOT OPTION is set. The Virtual Media device is connected on the next server boot following the setting of the 
VM. BOOT OPTION. After the server has booted once with the Virtual Media device connected, on the subsequent 
server reboot, the Virtual Media device does not connect and the following Virtual Media device settings reset to their 
default values: 


o 


о 


ВООТ ОРТТОМ - МО ВООТ 


IMAGE INSERTED - NO 


• NO ВООТ sets the УМ BOOT OPTION to NO ВООТ. The Virtual Media device is not connected during the next 
server boot. The Virtual Media device is not disconnected immediately when the VM, BOOT OPTION is set. The Virtual 
Media device is disconnected on the next server boot following the setting of the VM BOOT OPTION. After the server 
has booted, the Virtual Media device does not connect and the following Virtual Media device settings reset to their 
default values: 


о 


о 


ВООТ ОРТТОМ - МО ВООТ 


IMAGE INSERTED - NO 


VM. WRITE PROTECT sets the write protect flag value for the Virtual Floppy. This value is not significant for the Virtual 
Media CD-ROM. The possible values are Y or N. 


SET VM, STATUS runtime errors 


The possible runtime errors are: 


* iLO information is open for read-only access. Write access is required for 
this operation. 


* User does not have correct privilege for action. VIRTUAL MEDIA PRIV 
required. 


. Ап 


invalid Virtual Media option has been given. 


CERTIFICATE, SIGNING REQUEST 


This command requests a certificate from iLO. When this command is received, iLO generates a certificate signing request. 
The request is returned to the user enclosed in a CERTIFICATE SIGNING REQUEST tag. This command requires 
HPQLOCFG version 5.00 or later. 


Default response: 


«RI 


BCL V 


Cc} 


ERSION-"2.0"» 
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«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<RIB_ INFO MODE="write"> 
«CERTIFICATE SIGNING REQUEST/> 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


т 


Custom response: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 


<КІВ INFO MODE-"write"» 
<!-- Default ==> 
«1-- «CERTIFICATE SIGNING REQUEST/» --> 
<!-- Custom CSR ins 
<CERTIFICATE SIGNING REQUEST> 
<CSR_STATE VALUE =""/> 
<CSR_COUNTRY VALUE ="US"/> 
<CSR_LOCALITY VALUE ="Houston"/> 


<CSR_ORGANIZATION VALUE ="Hewlett-Packard Company"/> 
<CSR_ORGANIZATIONAL UNIT VALUE =""/> 
«CSR COMMON NAME VALUE -"test.com"/» 
</CERTIFICATE SIGNING REQUEST» 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


т 


CERTIFICATE, SIGNING REQUEST parameters (for custom CSR) 


CSR STATE - Specifies state in which the company or organization that owns the iLO subsystem is located. 


CSR. COUNTRY - Specifies the two-character country code for the country in which the company or organization that 
owns the iLO subsystem is located. 


CSR LOCALITY - Specifies the city or locality in which the company or organization that owns the iLO subsystem is 
located. 


CSR ORGANIZATION - Specifies the name of the company or organization that owns the iLO subsystem. 
CSR ORGANIZATIONAL UNIT - The unit within the company or organization that owns the iLO subsystem 
CSR COMMON. NAME - The FQDN of the iLO subsystem. 


CERTIFICATE, SIGNING, REQUEST errors 


Possible error messages for CERTIFICATE, SIGNING, REQUEST for custom CSR scripts include: 


e CSR STATE is too long. 


* Need a value for the CSR STATE tag. 


E 


e CSR COUNTRY is too long. 

e Need a value for the CSR_COUNTRY tag. 
e CSR LOCALITY is too long. 

* Need a value for the CSR LOCALITY tag. 


e CSR ORGANIZATION is too long. 
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Need a value for the CSR ORGANIZATION tag. 


CSR ORGANIZATIONAL UNIT is too long. 


CSR COMMON NAME is too long. 


ІЗІ 


Need a value for the CSR COMMON МАМЕ tag. 


User does NOT have correct privilege for action. CONFIG ILO PRIV required. 


When you first request a new CSR, or if the system is already working on another CSR, you will see this message: 


The iLO subsystem is currently generating a Certificate Signing Request(CSR), 
run Script after 10 minutes or more to receive the CSR. 


IMPORT CERTIFICATE 


The IMPORT CERTIFICATE command imports a signed certificate into iLO. The signed certificate must be a signed 
version of a certificate signing request. This command requires HPOLOCFG. EXE version 1.00 or later. 


For example: 


<RIBCL VERSION="2.0"> 


«LOGIN USER LOGIN = "adminname" PASSWORD = "password"» 
<КІВ INFO MODE - "write"» 
XIMPORT CERTIFICATE» 
<!-- Replace the following text and comments with the certificate --> 
<!-- INCLUDE the full header and full footer of the certificate --> 
<!-- For example: > 
SoS BEGIN CERTIFICATE----- 
«!-- Ceritificate Data --> 
= END CERTIFICATE----- 
</IMPORT_CERTIFICATE> 
<!-- The iLO will be reset after the certificate has been imported. --> 


«/RIB INFO» 
«/LOGIN» 


</RIBCL> 


IMPORT_CERTIFICATE parameters 


None 


IMPORT_CERTIFICATE errors 


The possible IMPORT_CERTIFICATE error messages include: 


iLO information is open for read-only access. Write access is required for 
this operation. 


Error reading certificate: The imported certificate is invalid. 


FACTORY_DEFAULTS 


Use this command to set the iLO device to factory default settings. Use HPQLOCFG.EXE version 1.00 or later with this 
command. Replace USER, LOGIN and PASSWORD values with values that are appropriate for your environment. 
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WARNING: Resetting an iLO device to factory defaults changes the the DNS name to the default, and the iLO 
device can be accessed using only the default Administrator user account and default password. Without these 


defaults, iLO access must be reconfigured using the RBSU. 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
<КІВ INFO MODE="write"> 
«FACTORY DEFAULTS/> 
«/RIB INFO» 
«/LOGIN» 
</RIBCL> 


FACTORY_DEFAULTS parameters 


None 


FACTORY_DEFAULTS runtime errors 


None 


IMPORT_SSH_KEY 


The IMPORT_SSH_KEY command imports an SSH_KEY and associated iLO usernam 
HPQLOCFG.EXE version 5.00 or later. 


e into iLO. This command requires 


After generating an SSH key using ssh-keygen, puttygen.exe, or another SSH key generating utility to produce a 1024 bit 


DSA key, and creating the key.pub file, perform the following: 


1. Locate the key.pub file and insert the contents between 


===== BEGIN SSH KEY----- 


----- END SSH KEY----- 


The file begins with: 


ssh-dss 


2. At the end of the key, append a space and the name of a valid iLO 5 username a 
For example: 


XXX Some-text xxx ASmith 


s displayed on the Modify User page. 


The username is case-sensitive and must match the iLO 5 username to associate the SSH key with the correct user. 


<RIBCL VERSION-"2.0"» 

«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 

<RIB INFO MODE-"write"» 
«IMPORT SSH K 

===== ВЕСІМ 55Н К 

ssh-dss 


ASampleKeyAAA 


ftnNE12JR8T8XQOqyzqcltt6FLFRXLRM5PJpOf/IGA4hN45 


-xtJbaqkhHtaKqFjlfO1NjszHrFN26H1AhWOjY2bEwj2wlJzBMAhXwnPQelOQsCnJDf- 
zCzbDne*5Va86-*qWxmO0lsDEChvZPM6wpjkXvHwuInjxTzOGQTq-4-tvmYlol/AAAAFQCIM 
FaZjE9950hX9Hl1DaDzpsVTXvwAAAIA6ec/hAkas2N762jtlHvSuvZaQRzu49DOtjXVI 


pNdJAhTC802505PzkGLf5qhrbDnusclCvoH7DuxyHjeOUVxbC5wFOl 
Gt9TQOiUV-NRwnACR5ESOi63zTJIvKIYZDT2ISeXhF2iU6txjZzdel 


BcGFAVnpYZ8nGOQ 
Em7vQz3slaY3dg 


AAAIAQA6i6FBzJAYXziF/qmWMt4y6SlylOQDAsxPKk7rpxegv8RlTeon/aeL70jb9GQ 


L 
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2xnENS5gobaNZxKz2d4/jwg3t+qgTDT6V1Gtb7+nEI/XHIc717/7oqgi0v4VE3WxN+H 

JWsv2jwUpAzRGqJOoojRG/CCru0K-*jgTOf/dilo0sw-- ASmith 

eem END SSH KE 

«/IMPORT SSH KEY» 
«/RIB INFO» 
</LOGIN> 

</RIBCL> 


[Ej 
Koj 


IMPORT_SSH_KEY parameters 


None 


IMPORT_SSH_KEY runtime errors 


A possible IMPORT_SSH_KEY error message includes: 


iLO information is open for read-only access. Write access is required for 
this operation. 


DIR_INFO 


The DIR_INFO command can only appear within a LOGIN command block. When the command is parsed, it reads the local 
directory information database into memory and prepares to edit it. Only commands that are DIR_INFO type commands 
are valid inside the DIR INFO command block. The DIR INFO command generates a response that indicates to the host 
application whether the database was successfully read or not. If the database is open for writing by another application, 
then this call fails. 


DIR. INFO requires the MODE parameter with a value of read or write. MODE is a specific string parameter with a 
maximum length of 10 characters that specifies what you intend to do with the information. 


Write mode enables both reading and writing of iLO information. Read mode prevents modification of the iLO information. 


For example: 


«DIR INFO MODE="read"> 
Sails DIR INFO commands ... 
«/DIR INFO» 


GET. DIR CONFIG 


The GET DIR CONFIG command requests the respective iLO directory settings. For this command to parse correctly, the 
GET. DIR CONFIG command must appear within a DIR INFO command block, and DIR. INFO MODE can be set to read or 
write. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«DIR INFO MODE="read"> 
«GET DIR CONFIG/» 
«/DIR INFO» 
«/LOGIN» 
</RIBCL> 
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NOTE: The information returned by GET. DIR CONFIG has not been enhanced to support the extended group privileges 
available from the iLO 5 web interface. For more information about user and group privileges in iLO 5, see the HPE iLO 5 
User Guide in the HPE Information Library at http://www.hpe.com/support/ilo-docs. 


GET DIR, CONFIG parameters 


None 


СЕТ DIR, CONFIG runtime errors 


None 


GET, DIR. CONFIG return messages 


Directory integration works with Lights-Out schema with or without extensions (schema-free). Depending on your 
directory configuration, the response to GET DIR CONFIG may contain different data. 


Possible GET DIR CONFIG return messages are: 


e А directory services (with schema extension) return message: 


«GET DIR CONFIG» 

«DIR AUTHENTICATION ENABLED VALUE-"Y"/» 

«DIR LOCAL USER ACCT VALUE="Y"/> 

«DIR GENERIC LDAP ENABLED VALUE="N"/> 

«DIR SERVER ADDRESS VALUE- "adserv.demo.com"/» 
«DIR SERVER PORT VALUE= "636"/> 

«DIR OBJECT DN VALUE-"CN-SERVER1 RIB,OU-RIB,DC-HPRIB, DC-LABS"/» 
«DIR USER CONTEXT 1 VALUE="CN=Users0,DC=HPRIBO, DC=LABS"/> 
«DIR USER CONTEXT 2 VALUE-"CN-Usersl,DC-HPRIB1, DC=LABS"/> 
«DIR USER CONTEXT 3 VALUE= ""/> 

«DIR USER CONTEXT 4 VALUE- ""/» 

«DIR USER CONTEXT 5 VALUE= ""/> 

«DIR USER CONTEXT 6 VALUE= ""/> 

«DIR USER CONTEXT 7 VALUE- ""/» 

«DIR USER CONTEXT 8 VALUE= ""/> 

«DIR USER CONTEXT 9 VALUE= ""/> 

«DIR USER CONTEXT 10 VALUE= ""/> 

«DIR USER CONTEXT 11 VALUE- ""/» 

«DIR USER CONTEXT 12 VALUE- ""/» 

«DIR USER CONTEXT 13 VALUE= ""/> 

«DIR USER CONTEXT 14 VALUE= ""/> 

«DIR USER CONTEXT 15 VALUE= ""/> 

«DIR ENABLE СЕР ACCT VALUE= "N"/> 

«DIR GRPACCT1 NAME VALUE= "Administrators"/> 

«DIR GRPACCT1 PRIV VALUE= "1,2,3,4,5,6"/» 

«DIR GRPACCT1 SID VALUE= ""/> 

<DIR_GRPACCT2 NAME VALUE= "Authenticated Users"/> 
«DIR GRPACCT2 PRIV VALUE= "6"/> 

«DIR GRPACCT2 SID VALUE= "S-1-5-11"/» 

«DIR KERBEROS ENABLED VALUE-"N"/» 

«DIR KERBEROS REALM VALUE-""/» 

«DIR KERBEROS KDC ADDRESS VALUE- ""/» 

«DIR KERBEROS KDC PORT VALUE- "88"/» 
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| 


«/GET DIR CONFIG» 


A schema-free directory (without schema extension) return message: 


«GET DIR CONFIG» 
«DIR AUTHENTICATION ENABLED VALUE-"Y"/» 

«DIR LOCAL USER ACCT VALUE-"Y"/» 

«DIR GENERIC LDAP ENABLED VALUE="N"> 

«DIR SERVER ADDRESS VA UE="adserv.demo.com"/> 
«DIR SERVER PORT VALUE= "636"/» 

«DIR OBJECT DN VALUE= ""/> 

<DIR_USER CONTEXT 1 VALUE="CN=Users, DC=d mo, DC=com"/> 
«DIR USER CONTEXT 2 VALUE= wo /> 

«DIR USER CONTEXT 3 VALUE= "mms. 

«DIR USER CONTEXT 4 VALUE= "m/s 

«DIR USER CONTEXT 5 VALUE= "m /> 

«DIR USER CONTEXT 6 VALUE= "m 

«DIR USER CONTEXT 7 VALUE= "os. 

«DIR USER CONTEXT 8 VALUE= ""/> 

<DIR_USER CONTEXT 9 VALUE= "m/s 

«DIR USER CONTEXT 10 VALUE= "m /> 

«DIR USER CONTEXT 11 VALUE= "m /> 

«DIR USER CONTEXT 12 VALUE= "t /> 

«DIR USER CONTEXT 13 VALUE= "m /> 

«DIR USER CONTEXT 14 VALUE= "m /> 

«DIR USER CONTEXT 15 VALUE= "m f 

«DIR ENABLE GRP ACCT VALUE- "Y"/» 

«DIR GRPACCT1 NAME VALUE="CN=iLOAdmins, CN=Users, DC=demo, DC=com"/> 
<рІК СКРАССТ1 PRIV VALUEZ"TI,2;,9,4,5"/- 

«DIR GRPACCT1 SID VALUE= "S-1-0"/» 

«DIR KERBEROS ENABLED VALUE="N"/> 

«DIR KERBEROS REALM VALUE-""/» 

«DIR KERBEROS KDC ADDRESS VALUE- ""/» 

«DIR KERBEROS KDC PORT VALUE- "88"/> 
</СЕТ DIR СОМЕІС> 


А Kerberos-enabled directory return message: 


«GET DIR CONFIG» 

«DIR AUTHENTICATION ENABLED VALUE-"N"/» 
«DIR LOCAL USER ACCT VALUE="Y"/> 
«DIR SERVER ADDRESS VALUE= ""/» 
«DIR SERVER PORT VALUE= "636" /» 
«DIR OBJECT DN VALUE- ""/» 

«DIR USER CONTEXT 1 VALUE= nans. 
«DIR USER CONTEXT 2 VALUE= ШЫРА» 
«DIR USER CONTEXT 3 VALUE= ""/> 
«DIR USER CONTEXT 4 VALUE= "avs 
«DIR USER CONTEXT 5 VALUE= Mm >> 
«DIR USER CONTEXT 6 VALUE= ""/s 
«DIR USER CONTEXT 7 VALUE= wn s. 
«DIR USER CONTEXT 8 VALUE= ""/» 
«DIR USER CONTEXT 9 VALUE= ""/> 
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«DIR USER CONTEXT 10 VALUE- ""/> 
«DIR USER CONTEXT 11 VALUE- ""/» 
«DIR USER CONTEXT 12 VALUE- ""/» 
«DIR USER CONTEXT 13 VALUE= ""/> 
«DIR USER CONTEXT 14 VALUE= ""/> 
«DIR USER CONTEXT 15 VALUE- ""/» 
«DIR ENABLE GRP ACCT VALUE- "N"/» 
«DIR GRPACCT1 NAME VALUE= "Administrators"/» 
«DIR GRPACCT1 PRIV VALUE= "1,2,3,4,5,6"/> 
«DIR GRPACCT1 SID VALUE= ""/> 
«DIR GRPACCT2 NAME VALUE= "Authenticated Users"/> 
<DIR_GRPACCT2_PRIV VALUE= "6"/> 
«DIR GRPACCT2 SID VALUE= "S-1-5-11"/» 
«DIR GRPACCT3 NAME VALUE- "user0"/» 
«DIR GRPACCT3 PRIV VALUE= "1,2,3,4,5,6"/> 
«DIR GRPACCT3 SID VALUE- "S-1-5-21-123456789-123456789- 
1234567890-1234"/» 
«DIR KERBEROS ENABLED VALUE-"Y"/» 
XDIR KERBEROS REALM VALUE-"EXAMPLE.NET"/» 
«DIR KERBEROS KDC ADDRESS VALUE- "kdc.example.net"/» 
«DIR KERBEROS KDC PORT VALUE- "88"/» 
«/GET DIR СОМЕІС> 
MOD DIR, CONFIG 


The MOD DIR CONFIG command modifies the directory settings on iLO. For this command to parse correctly, the 
MOD DIR, CONFIG command must appear within a DIR. INFO command block, and DIR. INFO MODE must be set to write. 
The user must have the Configure iLO Settings privilege to execute this command. 


The MOD DIR CONFIG is used in different ways depending on the environment. See MOD DIRECTORY.XML (example 
below) for an example suitable for use in an environment with directory integration and existing schemas. See 
MOD SCHEMALESS DIRECTORY.XML for an example suitable for use in a schemaless directory configuration. 


For example: 


<RIBCL УЕК5ІОМ-"2.0"> 


«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 


«DIR INFO MODE-"wri 
«MOD DIR CONFIG» 


te"> 


<DIR AUTHENTICATION ENABLED value="Yes"/> 


<DIR LOCAL USER ACCT value="Yes"/> 

<!-- NOTE: For schemaless Directory configuration, please 
<!-- ensure that the following settings are modified as 
<!-- required so that user can logon with Email format and 
<!-- Netbios formats successfully: 

== 1. DIR SERVER ADDRESS value need to Бе set to 

<!-- directory server DNS Name or FQDN (Full qualified 
hes Domain Name) 

<!-- Please check and update the following iLO Network 
<!-- Settings . 

<!-- 1. The domain name of 110 should match the domain of 
<!-- the directory server. 

<!-- 2. One of the primary, secondary or Tertiary DNS 
<!-- server must have the same ІР address as the 

<1-- Directory server. 

«DIR SERVER ADDRESS value-"dlilol.mycompu.com"/» 
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«DIR SERVER PORT value-"636"/» 
«DIR OBJECT DN value="CN=serverl rib,OU-RIB, DC=mycompu, DC=com"/> 
«DIR OBJECT PASSWORD value-"password"/» 
«DIR USER CONTEXT 1 value="CN=Users, DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 2 value-"CN-Users2,DC-mycompu, DC=com"/> 
«DIR USER CONTEXT 3 value="CN=Users3,DC=mycompu, DC=com"/> 
<1-- Firmware support information for next 12 tags: 
«1-- iLO 5 - А11 versions. 
<1-- iLO 4 - All versions. 
«1-- iLO 3 - All versions. 
<1== 110 2 - 1.77 and later. 
«DIR USER CONTEXT 4 value-"CN-Users4,DC-mycompu, DC-com"/» 
«DIR USER CONTEXT 5 value-"CN-Users5,DC-mycompu, DC=com"/> 
«DIR USER CONTEXT 6 value="CN=Users6,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 7 value="CN=Users7,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 8 value-"CN-Users8,DC-mycompu, DC=com"/> 
«DIR USER CONTEXT 9 value="CN=Users9,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 10 value="CN=Users10,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 11 value="CN=Users11,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 12 value="CN=Users12,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 13 value="CN=Users13,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 14 value="CN=Users14,DC=mycompu, DC=com"/> 
«DIR USER CONTEXT 15 value="CN=Users15,DC=mycompu, DC=com"/> 
<!--NOTE: Set the value to "NO" to enable the HP Extended 
<1-- Schema and Value "YES" to enable Default Directory 
<1== Login. To set Group Accounts апа privileges for 
«1-- Default Schema run Mod Schemaless Directory.xml. 
«DIR ENABLE СЕР ACCT value = "yes"/> 
XDIR GENERIC LDAP ENABLED VALUE-"yes"» 

<!-- Firmware support information for next 5 tags: --> 

<!-- iLO 5 - All versions. ==> 

<!-- iLO 4 - All versions. --> 

<!-- iLO 3 - 1.20 and later. --> 

<!-- 110 2 - None. --> 

«DIR KERBEROS ENABLED value-"Yes"/» 

«DIR KERBEROS REALM VALUE="realmname.domain.dom"/> 


R 
<DIR_KERBEROS KDC ADDR 
<DIR_KERBEROS_K 


DC PORT 


«DIR KERBEROS КЕҮТАВ> 


===== ВЕСІМ КЕ 


VGhpcyBpcyBhIH 


BpcyBvbmx51G 
ас4- 


EgdGVz 


END KEYTAB----- 


«/DIR KERBEROS KEYTAB» 


«/MOD DIR CONFIG» 


«/DIR INFO» 
«/LOGIN» 
«/RIBCL» 


VALUE-"88"/» 


ESS VALUE-"realmkdc.domain.dom"/» 


EJhc2U2NCBlbmNvZGVyLiAgVGhpcy 


NOTE: To modify only the kerberos authentication, start with the sample script Mod Kerberos Config.xml. 
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NOTE: Do not use the following tags when using directory integration with schema extension: 


е DIR ENABLE СЕР ACCT 


e DIR GRPACCT1 NAME 


e DIR GRPACCT1 PRIV 


Do not use the following tags when using schema-free directories: 


e DIR OBJECT. DN 


e РІК OBJECT PASSWORD 


Schemaless directory example (MOD SCHEMALESS, DIR.XML) 


«1-- RIBCL Sample Script for HP Lights-Out Products --» 
<!--Copyright (c) 2003,2016 Hewlett-Packard Development Company, L.P.--> 
<!-- Description: This is a sample XML script to modify the current --> 
gies schemaless directory configuration on following --> 
<!-- device: ==> 
<!-- Integrated Lights-Out 5 (iLO 5) --> 
<!-- Integrated Lights-Out 4 (110 4) --> 
<!-- Integrated Lights-Out 3 (110 3) ==> 
«1-- Integrated Lights-Out 2 (iLO 2) --> 
<!-- NOTE You will need to replace the USER LOGIN and PASSWORD --> 
<!-- values with values that are appropriate for your --> 
<!-- environment. --> 
<!-- NOTE Run Mod directory.xml to enable Directory login, --> 
<== And to set the directory server address. ==> 
<1-- Тһе Privilege values аг pes 
est 1 - Administer User Accounts ==> 
<!-- 2 = Remote Console Access --> 
ісе 3 - Virtual Power and Reset --> 
<!-- 4 = Virtual Media ==> 
Glas 5 = Configure iLO settings --> 
es 6 = Login Privilege --> 
«1-- Values "6" is supported by iLO 3 and iLO 4 --> 
<!-- firmware only. --> 
<!-- See "HP Integrated Lights-Out Management Processor --> 
сіре Scripting and Command Line Resource Guide" for more ==> 
«bes information on scripting and the syntax of the RIBCL --> 
ора. XML. ==> 
«1-- Firmware support information for this script: --> 
<!-- 110 5 - All versions. --> 
<1-- 110 4 - All versions. --» 
<1-- 110 3 - All versions. --> 
<!-- 110 2 - Version 1.10 or later. ==> 
<RIBCL VERSION="2.0"> 
<LOGIN USER_LOGI ="admin" PASSWORD-"admin123"» 
<DIR_INFO MODE = "write"» 
«MOD DIR CONFIG» 
«DIR ENABLE GRP ACCT value - "Yes"/» 
«DIR GRPACCT1 NAME value = "testl"/» 


«DIR GRPACCT1 PRIV value 


"3,4,5" > 
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<!-- alternative method for ilo3/4 only --> 
<!-- «DIR GRPACCT INDEX="1"> --» 
ізет <МАМЕ VALUE-"string"/» --> 
<!-- <5Ір VALUE-"S-1-0"/» --> 
<!-- «LOGIN PRIV VALUE-"Y"/» 

> 
<!-- «/DIR GRPACCT» --> 

«/MOD DIR СОМҒІС> 
«/DIR INFO» 
</LOGIN> 
</RIBCL> 


Cc} 


Firmware support information for next tag: 
iLO 5 - All versions. 

iLO 4 - All versions. 

iLO 3 - Version 1.20 or later only 


<DIR_GRPACCT1_SID value= "5-1-0"/> 


<DIR_GRPACCT2 NAME value = "test2"/> 

«DIR GRPACCT2 PRIV value = "2,3,5"/> 

<!-- Firmware support information for next tag: 
«Lc iLO 5 - All versions. 

<!-- 110 4 - All versions. 

<!-- 110 3 - Version 1.20 or later only 


«DIR GRPACCT2 SID value= "5-2-0"/> 


«DIR GRPACCT3 NAME value - "test3"/» 

«DIR GRPACCT3 PRIV value = "1,3,4"/> 

xe Firmware support information for next tag: 
«1-- iLO 5 - All versions. 

<1== 110 4 - All versions. 

<1-- 110 3 - Version 1.20 or later only 


«DIR GRPACC] 


«DIR GRPACC] 
«DIR GRPACC] 
Firmware support information for next tag: 
iLO 5 - All versions. 

iLO 4 - All versions. 

iLO 3 - Version 1.20 or later only 


«== 


«DIR GRPACC] 


«DIR GRPACC] 
«DIR GRPACC] 
Firmware support information for next tag: 
iLO 5 - All versions. 

iLO 4 - All versions. 

iLO 3 - Version 1.20 or later only 


«bes 


«DIR GRPACC] 


«DIR GRPACC] 
«DIR GRPACC] 


sies 


Г3 SID value= "5-3-0"/> 


Г4 NAME value = "test4"/» 
Г4 PRIV value = "3,6"/> 


Г4 SID value= "5-4-0"/> 


[5 NAME value = "test5"/> 


r5 PRIV value = "2,3"/> 


[5 SID value= "5-5-0"/> 


Гб NAME value "test6"/» 


Г6 PRIV value = "1,3,4,6"/» 


Firmware support information for next tag: 
iLO 5 - All versions. 

iLO 4 - All versions. 

iLO 3 - Version 1.20 or later only 


«DIR GRPACCT6 SID value- "5-6-0"/> 
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MOD DIR CONFIG parameters 


All of the following parameters are optional. If a parameter is not specified, then the parameter value for the specified 
setting is preserved. 


DIR. АОТНЕМТІСАТІОМ ENABLED enables or disables directory authentication. The possible values are Yes and No. 
DIR. ENABLE GRP ACCT causes iLO to use schema-less directory integration. The possible values are Yes and No. 


DIR. GENERIC LDAP. ENABLED enables or disables OpenLDAP support. This works only in schema-free mode. The 
possible values are Yes and No. 


When using schema-free directory integration, iLO supports variable privileges associated with different directory groups. 
These groups are contained in the directory, and the corresponding member iLO privileges are stored in iLO. 


DIR. KERBEROS ENABLED enables or disables Kerberos authentication. The possible values are Yes and No. 


DIR. KERBEROS REALM specifies the Kerberos realm for which the domain controller is configured. By convention, the 
Kerberos realm name for a given domain is the domain name converted to uppercase. 


DIR. KERBEROS KDC ADDRESS specifies the location of the domain controller. The domain controller location is specified 
as an IP address or DNS name. 


DIR. KERBEROS KDC PORT specifies the port number used to connect to the domain controller. The Kerberos port 
number is 88, but the domain controller can be configured for a different port number. 


DIR. KERBEROS КЕҮТАВ specifies the contents of the keytab file which is a binary file containing pairs of principals and 
encrypted passwords. In the Windows environment, the keytab file is generated with a ktpass utility. After generating a 
binary keytab file using the appropriate utility, use a Base64 encoder to convert the binary file to ASCII format. 


Place the Base64 contents between: 


== ВЕСІМ КЕҮТАВ----- 


----- END KEYTAB----- 


• DIR GRPACCT1 NAME identifies a group container іп the directory, such as Administrators, Users, or Power Users. 


* DIR GRPACCTI1 PRIV numerically identifies iLO privileges for members of the group. You can mix and match 
privileges by including more than one value. These privileges are expressed as a comma separated list of numbers 
(1,2,3,4,5,6) which correlate to: 


9 1—Administer Group Accounts 
с 2—Remote Console Access 

e 3—Virtual Power and Reset 

с  4— Virtual Media 

° 5—Configure 5 Settings 


o 6—1 одіп Privilege 
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NOTE: Do not use the following tags when using directory integration with schema extension: 


о DIR ENABLE ОЮР ACCT 

о DIR GRPACCT1 NAME 

о DIR GRPACCT1 PRIV 

о DIR GENERIC LDAP ENABLED 

Do not use the following tags when using schema-free directories 
о ІК OBJECT. DN 


о DIR OBJECT PASSWORD 


DIR. LOCAL, USER. ACCT enables or disables local user accounts. The possible values are Yes and No. 


DIR. SERVER. ADDRESS specifies the location of the directory server. The directory server location is specified as an IP 
address or DNS name. 


DIR, SERVER, PORT specifies the port number used to connect to the directory server. This value is obtained from the 
directory administrator. The secure LDAP port is 636, but the directory server can be configured for a different port 
number. 


DIR. OBJECT. DN specifies the unique name of iLO in the directory server. This value is obtained from the directory 
administrator. Distinguished names are limited to 256 characters. 


DIR. OBJECT. PASSWORD specifies the password associated with the iLO object in the directory server. Passwords are 
limited to 59 characters. 


DIR. USER. CONTEXT 1, DIR. USER. CONTEXT 2, and DIR. USER. CONTEXT. 15 specify searchable contexts used to 
locate the user when the user is trying to authenticate using directories. If the user is not located using the first path, then 
the parameters specified in the second and third paths are used. The values for these parameters are obtained from the 
directory administrator. Directory User Contexts are limited to 128 characters each. 


MOD DIR, CONFIG runtime errors 


Possible MOD. DIR, CONFIG error messages include: 


* Directory information is open for read-only access. Write access is 
required for this operation. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


START, DIR TEST 


The START. DIR TEST command enables you to validate the configured directory settings. For this command to parse 
correctly, the START. DIR TEST command must appear within a DIR INFO command block, and DIR INFO MODE must be 
set to write. The user must have the Configure iLO Settings privilege to execute this command. 


NOTE: The directory test results are reset when directory settings are saved, or when the directory tests are started. 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«DIR INFO MODE-"write"» 
«START DIR TEST» 
«DIR ADMIN DISTINGUISHED NAME VALUE-"ad admin username"/» 
«DIR ADMIN PASSWORD VALUE-"password"/» 
«TEST USER NAME VALUE-"test user name"/» 
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<ТЕ5Т USER PASSWORD VALUE-"password"/» 
«/START DIR TEST» 
«/DIR INFO» 
«/LOGIN» 
</RIBCL> 


T 


START_DIR_TEST parameters 


All of the following parameters are optional. If a parameter is not specified, then the parameter value for the specified 
setting will be left empty. 


• РІВ ADMIN, DISTINGUISHED. NAME searches the directory for iLO objects, roles, and search contexts. This user must 
have the right to read the directory. 


• DIR ADMIN, PASSWORD authenticates the directory administrator. 


e TEST USER NAME tests login and access rights to iLO. This name does not need to be fully distinguished because 
user search contexts can be applied. This user must be associated with a role for this iLO. 


e TEST USER PASSWORD authenticates the test user. 


START DIR TEST runtime errors 


Possible START. DIR. TEST error messages include: 


* Directory information is open for read-only access. Write access is 
required for this operation. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


АВОВТ DIR, TEST 


The ABORT DIR TEST command stops a running directory test. For this command to parse correctly, the 
ABORT. DIR. TEST command must appear within a DIR INFO command block, and DIR INFO MODE must be set to write. 
The user must have the Configure iLO Settings privilege to execute this command. 


«RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«DIR INFO MODE-"write"» 
<ABORT DIR ТЕ5Т/> 
«/DIR INFO» 
«/LOGIN» 
</RIBCL> 


ABORT_DIR_TEST runtime errors 


Possible ABORT _DIR_TEST error messages include: 


* iLO information is open for read-only access. Write access is required for 
this operation. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 
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GET DIR TEST, RESULTS 


The GET DIR TEST. RESULTS command requests the results of directory tests. For this command to parse correctly, the 
GET. DIR TEST RESULTS command must appear within a DIR INFO command block, and DIR INFO MODE must be set to 
read. The user must have the Configure iLO Settings privilege to execute this command. 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<DIR_INFO MODE="read"> 
«GET DIR TEST RESULTS/» 
«/DIR INFO» 
«/LOGIN» 
</RIBCL> 


GET_DIR_TEST_RESULTS runtime errors 


Possible GET_DIR_TEST_RESULTS error messages include: 


* This iLO information is read only. Write is not allowed. 

* User does not have correct privilege for action. CONFIG ILO PRIV required. 
* Directory test is in progress, please try after some time. 

* Directory test is not running. 

* Directory test aborted. 


e Aborting Directory test. 


BLADESYSTEM INFO 


Тһе BLADESYSTEM. INFO command only appears within a LOGIN command block. Only commands that are 
BLADESYSTEM,. INFO type commands аге valid inside the BLADESYSTEM INFO command block. 


This command block is only valid on ProLiant BL c-Class blade servers. BLADESYSTEM INFO requires the MODE 
parameter with a value of read or write. MODE is a specific string parameter with a maximum length of 10 characters that 
specifies what you intend to do with the information. 


Write mode enables both reading and writing of information to the blade system. Read mode prevents modification of the 
blade system information. 


The possible BLADESYSTEM INFO error messages include: 


e Invalid Mode 


* Server is not a rack server; rack commands do not apply 


For example: 


<BLADESYSTEM INFO MODE="read"> 
— BLADESYSTEM INFO commands ..... 
«/BLADESYSTEM INFO» 
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GET. ОА INFO 


The GET OA INFO command requests the Onboard Administrator information from the enclosure where iLO is located. 
For this command to parse correctly, the GET. OA INFO command must appear within a BLADESYSTEM INFO command 
block, and BLADESYSTEM INFO MODE can be set to read or write. 


For example: 


<RIBCL VERSION="2.0"> 

<LOGIN USER_LOGIN="adminname" PASSWORD="password"> 
<BLADESYSTEM INFO MODE="read"> 

<СЕТ ОА ІМЕО/> 

«/BLADESYSTEM ІМЕО> 
</LOGIN> 

</RIBCL> 


GET_OA_INFO parameters 


None 


GET_OA_INFO runtime errors 
A possible error message includes: 


Server is NOT a rack server; Rack commands do not apply. 


GET_OA_INFO return messages 


A possible GET_OA_INFO return message is: 


<СЕТ ОА ІМЕО> 
<ipAddress>192.168.1.105</ipAddress/> 
<macAddress>00:22:44:55:33:77</macAddress/> 
«System Health»1«/System Health» 
<uidStatus>On</uidStatus> 

<RACK>South Park</RACK> 

<ENCL>Kenny</ENCL> 

<Location>7</Location> 

</GET_OA_INFO> 


SERVER_INFO 


The SERVER_INFO command can only appear within a LOGIN command block. Only commands that are SERVER_INFO 
type commands are valid inside the SERVER_INFO command block. 


SERVER_INFO requires the MODE parameter with a value of read or write. MODE is a specific string parameter with a 
maximum length of 10 characters that specifies what you intend to do with the information. 


Write mode enables both the reading and writing of iLO information. Read mode prevents modification of iLO information. 


For example: 


«SERVER INFO MODE="read"> 
€ SERVER INFO commands ......... 
«/SERVER INFO» 
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Reset server example: 


<КІВС 


, VER 


«LOGIN US 


SION-"2.0"» 
ER LOGIN-"adminname" PASSWORD-"password"» 


E 


<SE 


RVER | 


INFO MODE="write"> 


«R 


ESET 


SERVER/» 


«/8 


ERV 


</LOGIN> 
</RIBCL> 


ER INFO» 


Set host power example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE-"write"» 
«!-- Modify the HOST POWER attribute to toggle power on the host server --> 
«!-- HOST POWER-"No" (Turns host server power off) 
<!-- А graceful shutdown will be attempted for ACPI-aware 
<!-- operating systems configured to support graceful shutdown. 
«!-- HOST POWER-"Yes" (Turns host server power on) 
«SET HOST POWER HOST POWER-"No"/» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 
GET_TPM_STATUS 


Use GET_TPM_STATUS to retrieve the status of the HPE Trusted Platform Module. The response includes whether a TPM 
is supported, if a TPM is present, and whether the TPM is enabled (indicated by YES or NO). The specified user must have 
a valid iLO account to execute RIBCL commands. For this command to parse correctly, the command must appear within a 
SERVER_INFO command block. You can set SERVER_INFO MODE to read or write. 


For example: 


<RIBCL VER 
<LOGIN U 
<SERVE 


T 


SION="2.0"> 
SER LOGIN-"adminname" PASSWORD="password"> 


«GET 


R INFO MODE-"read"» 
ТРМ STATUS/» 


«/ SERV. 
</LOGIN> 
</RIBCL> 


T 


R INFO» 


GET, TPM STATUS parameters 


None 


СЕТ TPM, STATUS runtime errors 


None 


СЕТ ТРМ STATUS return messages 


A possible GET TPM STATUS return message includes: 


<?xml version="1.0"?> 


<RIBC 


STATUS 


M 


Cc} 


1 VERSION="2.23"> 
«RESPONSE 


-"0x0000" 


ESSAG 


E-'No error' 
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«GET ТРМ STATUS» 
«TPM SUPPORTED VALUE="Yes"/> 
E-"Yes"/» 
="Yes"/> 
D MODULE TYPE VALUE-"TPM 2.0"/> 
<ТРМ CHIP IDENTIFIER VALUE-"STMicro"/» 
<TRUSTED MODULE VERSION VALUE="73"/> 
</СЕТ TPM STATUS» 
</RIBCL> 
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GET_CURRENT_BOOT_MODE 


Use GET CURRENT BOOT MODE to retrieve the current boot mode. The response will include either Legacy boot 
mode or UEFI boot mode. The specified user must have a valid iLO account to execute RIBCL commands. For this 
command to parse correctly, the command must appear within a SERVER INFO command block, and SERVER INFO 
MODE can be set to either read or write. For example: 


<КІВСІ. VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="read"> 
«GET CURRENT BOOT MODE/» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


Possible return values are LEGACY or UEFI. 


GET_CURRENT_BOOT_MODE parameters 


None 


GET_CURRENT_BOOT_MODE runtime errors 


None 


GET_CURRENT_BOOT_MODE return messages 


A possible GET_CURRENT_BOOT_MODE return message includes: 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 
/> 
<СЕТ СОККЕМТ ВООТ МОПЕ> 
<ВООТ MODE VALUE-"UEFI"/» 


«/GET CURRENT BOOT MODE» 


</RIBCL> 


GET_PENDING_BOOT_MODE 


Use GET_PENDING_BOOT_MODE to retrieve the pending boot mode, which becomes active on the next server reboot. 
The specified user must have a valid iLO account to execute RIBCL commands. For this command to parse correctly, the 
command must appear within a SERVER_INFO command block, and SERVER_INFO MODE can be set to either read or 
write. 
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Еог ехатріе: 


Lr] 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="read"> 
<GET PENDING BOOT MODE/> 
</SERVER_INFO> 
</LOGIN> 
</RIBCL> 


IU 


X 


Possible return values are LEGACY, UEFI, or UNKNOWN. 


GET_PENDING_BOOT_MODE parameters 


None 


GET_PENDING_BOOT_MODE runtime errors 


None 


GET. PENDING BOOT MODE return messages 


<RIBCL VERSION-"2.23"» 

«RESPONSE 
STATUS-"0x0000" 
MESSAGE-'No error' 

/> 

«GET PENDING BOOT MODE» 

<BOOT MODE VALUE-"LEGACY"/» 

«/GET PENDING BOOT MODE></RIBCL> 


Т 


SET PENDING BOOT, MODE 


Use SET. PENDING ВООТ. MODE to set the mode for the next server boot. The specified user must have a valid iLO 
account to execute RIBCL commands. For this command to parse correctly, the command must appear within a 
SERVER INFO command block, and SERVER, INFO MODE must be set to write. 


For example: 


Lr] 


«RIBCL VERSION-"2.0"» 

«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE-"write"» 
«SET PENDING BOOT MODE VALUE-"LEGACY"/» 
«/SERVER INFO» 

«/LOGIN» 

</RIBCL> 


T 


т 


ЅЕТ РЕМОІМС BOOT MODE parameters 


SET. PENDING. BOOT. MODE sets the mode for the next server boot. Valid values include LEGACY or UEFI. 


SET, PENDING, ВООТ MODE runtime errors 


Possible error messages include: 
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* This system is UEFI only. 


* This system is Legacy only. 


* Unable to determine if system supports UEFI, try again. 


GET PERSISTENT BOOT 


Тһе GET PERSISTENT ВООТ command returns the current boot order, regardless of UEFI or Legacy mode. The specified 
user must have a valid iLO account to execute RIBCL commands. For this command to parse correctly, the command must 
appear within a SERVER, INFO command block, and SERVER INFO MODE can be set to either read or write. 


For example: 
<RIBCL VERSION="2.0"> 


«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="read"> 


<GET PERSISTENT BOOT/> 
</SERVER_INFO> 
</LOGIN> 
</RIBCL> 


GET_PERSISTENT_BOOT return messages 
A possible GET_PERSISTENT_BOOT return message when LEGACY is enabled includes: 


<?xml version="1.0"?> 


<RIBCL VERSION="2.23"> 
<RESPONSE 
STATUS="0x0000" 
MESSAGE='No error' 
/> 

<PERSISTENT BOOT> 
<DEVICE value="CDROM"/> 
<DEVICE value="HDD"/> 
<DEVICE value="FLOPPY"/> 
<DEVICE value="USB"/> 
«DEVICE value-"NETWORK1"/» 
«DEVICE value-"NETWORK2"/» 
«DEVICE value-"NETWORK3"/» 
«DEVICE value="NETWORK4"/> 
«DEVICE value-"NETWORK5"/» 
«DEVICE value-"NETWORK6"/» 
«DEVICE value-"NETWORK7"/» 
«DEVICE value-"NETWORK8"/» 
«DEVICE value-"NETWORK9"/» 
«DEVICE value-"NETWORK10"/» 
«DEVICE value-"NETWORK11"/» 
«DEVICE value-"NETWORK12"/» 

«/PERSISTENT ВООТ> 

«/RIBCL» 


A possible СЕТ PERSISTENT. BOOT return message when UEFI is enabled includes: 


<RIBCL VERSION="2.23"> 
«RESPONSE 
STATUS-"0x0000" 
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MESSAGE='No error' 
/> 
<РЕК5І5ТЕМТ ВООТ> 

<DEVICE value="Boot0009" DESCRIPTION-"Embedded FlexibleLOM 1 Port 1 : HP 
Ethernet 1Gb 4-port 331FLR Adapter - NIC (ІРу4) "/> 
«DEVICE value="Boot000A" DESCRIPTION="Front USB 1 : Imation Nano Pro"/» 
«DEVICE value="Boot000D" DESCRIPTION-"Windows Boot Manager"/> 
«DEVICE value="Boot0007" DESCRIPTION="Embedded SAS : Smart Array P8301 
Controller - 68 GB, RAID 0 Logical Drive(Target:0, Lun:0)"/» 

<DEVICE value="Boot0008" DESCRIPTION-"Embedded FlexibleLOM 1 Port 1 : HP 
Ethernet 1Gb 4-port 331FLR Adapter - NIC (IPv6) "/» 
«/PERSISTENT ВООТ> 
</RIBCL> 


Gl 


Gl 


SET_PERSISTENT_BOOT (Legacy) 


On non-UEFI systems, or UEFI systems in legacy mode, the SET_PERSISTENT_BOOT command takes one or more boot 
parameters and sets the normal boot order. If you do not list every option, the remaining options are shifted towards the 
bottom of the list. The specified user must have a valid iLO account to execute RIBCL commands. For this command to 
parse correctly, the command must appear within a SERVER_INFO command block, and SERVER_INFO MODE must be set 
to write. 


NOTE: This code modifies EVs. The one time boot EV is: 
СОТВТ1. 


This was modified to set the one-time boot and to display the current status. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="write"> 
«SET PERSISTENT BOOT> 
<DEVICE value = "FLOPPY"/> 
<DEVICE value = "CDROM"/> 
</5ЕТ PERSISTENT BOOT> 
</SERVER_INFO> 
</LOGIN> 
</RIBCL> 


T 


SET_PERSISTENT_BOOT parameters 


The value sets the default boot order. Valid values are: 


e CDROM 
e FlexibleLOM 


e EmbeddedLOM 


e NIC 
* HDD 
* SA HDD 
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e USB HDD 


e = PCI DEVICE 


SET, PERSISTENT BOOT runtime errors 


Some possible error messages you may see when running this command: 


* Post in progress, EV unavailable. 


• EV name too large. 


* EV data too large. 


* There is no such EV. 
* EV is not supported. 


* EV is not initialized. 


* ROM is busy, EV unavailable. 


SET PERSISTENT, BOOT (UEFI) 


On UEFI systems, SET. PERSISTENT. BOOT command takes one or more UEFI boot parameters and sets the normal boot 
order. If you do not list every option, the remaining options are shifted toward the bottom of the list. The specified user 
must have a valid iLO account to execute RIBCL commands. For this command to parse correctly, the command must 
appear within a SERVER INFO command block, and SERVER INFO MODE must be set to write. 


For example: 
<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE-2"write"» 
«SET PERSISTENT ВООТ> 
«DEVICE value - "Boot0008"/» 
«DEVICE value - "Boot0009"/» 
«DEVICE value - "Boot000A"/» 
«DEVICE value = "Boot000D"/» 
«/SET PERSISTENT ВООТ> 
«/SERVER INFO» 
«/LOGIN» 
</RIBCL> 


NOTE: Before using the SET PERSISTENT BOOT command іп UEFI mode, use GET PERSISTENT BOOT to retrieve the 
list of available boot selections. A server in UEFI mode does not have unique selections, as opposed to a non-UEFI server, 
or a UEFI server running in legacy mode. 


SET. PERSISTENT ВООТ parameters 


Base the parameters sent with the SET PERSISTENT BOOT command on the BootXXXX values available returned by the 
GET PERSISTENT BOOT command. For example, assume the following is returned from the GET command, indicating 
Boot0009 is the primary boot selection: 


<РЕВ515ТЕМТ ВООТ> 
«DEVICE value="Boot0009" DESCRIPTION-"Embedded FlexibleLOM 1 Port 1 : HP 
Ethernet 1Gb 4-port 331FLR Adapter - МІС (IPv4) "/> 
«DEVICE value-"Boot000A" DESCRIPTION-"Front USB 1 : Imation Nano Pro"/» 


ІЗІ 
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«DEVICE value="Boot000D" DESCRIPTION-"Windows Boot Manager"/> 

«DEVICE value-"Boot0007" DESCRIPTION-"Embedded SAS : Smart Array P830i 
Controller - 68 GB, RAID 0 Logical Drive(Target:0, Lun:0)"/» 
<DEVICE value="Boot0008" DESCRIPTION-"Embedded FlexibleLOM 1 Port 1 : HP 
Ethernet 1Gb 4-port 331FLR Adapter - NIC (IPv6) "/> 
«/PERSISTENT ВООТ> 


ІЗІ 


I 


The UEFI boot order is based on the order of the device values. To change the UEFI boot order, for example so that the 
Windows Boot Manager is first: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE-2"write"» 
«SET PERSISTENT ВООТ> 
«DEVICE value - "Boot000D"/» 
«DEVICE value - "Boot0009"/» 
«DEVICE value - "Boot000A"/» 
«DEVICE value - "Boot0007"/» 
«/SET PERSISTENT ВООТ> 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 
Alternatively, you can list only the device value that should be first (<DEVICE value = "Boot000D" />). Any 


devices not specified in the SET command are moved to the end of the list, just as they are handled in Legacy mode. 


NOTE: The DEVICE values are case sensitive, and must be entered when using SET_PERSISTENT_BOOT exactly as they 
are shown in the return from GET_PERSISTENT_BOOT. 


SET_PERSISTENT_BOOT runtime errors 


Some possible error messages you may see when running this command: 


e DEVICE is invalid. 


e Invalid device choice. 


* No UEFI Target boot device with the specified BootXXXX is available 


* Unable to allocate memory. 


e Boot mode is unknown. 


GET ONE, TIME BOOT 


The GET ONE TIME BOOT command retrieves the current setting for the one time boot. The specified user must have a 
valid iLO account to execute RIBCL commands. For this command to parse correctly, the command must appear within a 
SERVER INFO command block, and SERVER, INFO MODE must be set to read. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN US R LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="read"> 
«GET ONE TIME BOOT/» 
«/SERVER INFO» 
«/LOGIN» 


</RIBCL> 


H pH 
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СЕТ ONE, TIME BOOT return messages 


A possible GET ONE TIME BOOT return message includes: 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 


«RESPONSE 


STATUS-"0x0000" 


MESSAG 


E-'No error' 


/> 
«ONE TIME | 
«BOOT TY 
«/ONE TIME 
</RIBCL> 


Possible BOOT_ 


e NORMAL 
e FLOPPY 
e CDROM 
e HDD 

e USB 

. RBSU 


* NETWORK 


ВООТ> 


РЕ VALUE-"UEFI SHELL"/» 
BOOT> 


TYPE values include: 


T 


iL 


e UEFI SH 


* INTELLIGENT PROVISIONING 


e «BootXXXX» 


NOTE: Boot «XXXX» is a possible response on systems that support UEFI and are not in Legacy mode. This type of 
response also includes a DESCRIPTION, which includes the title of the device and other details. 


I 


NOTE: If the return message shows BOOT TYPE VALUE-"INVALID",you may have selected a one time boot mode 
in the iLO web interface that is not supported by iLO 5 RIBCL or on the command line, such as HTTP Boot. 


SET ONE TIME BOOT 


The SET ONE TIME BOOT command configures a single boot from a specific device. The specified user must have a valid 
iLO account to execute RIBCL commands. For this command to parse correctly, the command must appear within a 
SERVER INFO command block, and SERVER, INFO MODE must be set to write. 


NOTE: This code modifies EVs. 


The one-time boot is accomplished by reading and modifying СОТВТ1, CQTBOOTNEXT, and CQTESS, and reading 
CQHBOOTORDER to determine the valid boot devices. 


For example: 


<RIBCL VERSION="2.0"> 


<LOGIN US 


L 


ER LOGIN-"adminname" PASSWORD="password"> 
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«SERV 


T 


К INFO MODE="write"> 


«SET ONE TIME BOOT value - "U 
«/SERVER INFO» 
«/LOGIN» 
</RIBCL> 


SET_ONE_TIME_BOOT parameters 


EFI SH 


ELL"/» 


The value sets a specified device as the source for a single boot. Valid values include the following: 


NORMAL 


CDROM 


NETWORK 


C3 


EFI SHELL 


NOTE: UEFI, SHELL is only valid on systems that support UEFI. 


Intelligent Provisioning 


Boot«XXXX» 


NOTE: Boot «XXXX» is only valid on systems that support UEFI and are not in Legacy mode. Use 
GET PERSISTENT BOOT to see available values. 


iLO 5 options: 


EMB-M 


ENU—Displays the default boot menu 


EMB-ACU—Boots into ACU 


RBSU—Boots into the system RBSU. 


EMB-HPSUM-AUTO—Boots HPSUM in automatic update mode 


NOTE: In the iLO 5 web interface, it is possible to set an HTTP boot. This boot mode is not supported on the command 
line or RIBCL scripts. 


SET, ONE, TIME BOOT runtime errors 


Some possible error messages you may see when running this command: 


Post in progress, 


EV name too large. 


EV data too large. 


There is no such EV. 


С] 


EV is not supported. 


EV unavailable. 
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e EV is not initialized. 


* ROM is busy, EV unavailable. 


* Unable to determine if system supports UEFI, try again. 


* UEFI is not available on this system. 


GET SDCARD STATUS 


Use GET. SDCARD. STATUS to determine whether an SD (secure digital) card is connected to the server. The specified 
user must have a valid iLO account to execute RIBCL commands. For this command to parse correctly, the command must 
appear within a SERVER INFO command block. You can set the SERVER INFO MODE to read or write. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="read"> 
«GET SDCARD STATUS/> 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


I 


т 


Possible values returned include: 


e PRESENT 


* NOT PRESENT 


e UNKNOWN 


СЕТ SDCARD STATUS return messages 


A possible GET SDCARD STATUS return message includes: 


<?xml version="1.0"?> 

<RIBCL VERSION-"2.23"» 

«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 

/> 

«GET SDCARD STATUS» 

<SDCARD_ STATUS VALUE-"PRESENT"/» 

</СЕТ SDCARD STATUS- 

</RIBCL> 


GET_SUPPORTED_BOOT_MODE 


Use GET_SUPPORTED_BOOT_MODE to retrieve the supported boot modes. The specified user must have a valid iLO 
account to execute RIBCL commands. For this command to parse correctly, the command must appear within a 
SERVER INFO command block. You can set the SERVER INFO MODE to read or write. 


For example: 


<RIBCL VERSION="2.0"> 
<LOGIN USER_LOGIN="adminname" PASSWORD="password"> 
<SERVER_INFO MODE="read"> 
«GET SUPPORTED BOOT MODE/» 
«/SERVER INFO» 
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«/LOGIN» 
</RIBCL> 


Possible values returned include: 
e LEGACY ONLY 
e UEFI ONLY 


e LEGACY UEFI 


e UNKNOWN 


GET_SUPPORTED_BOOT_MODE return messages 


A possible GET SUPPORTED BOOT MODE return message includes: 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE-'No error' 
[> 
«GET SUPPORTED BOOT MODE» 
«SUPPORTED BOOT MODE VALUE-"LEGACY ONLY"/» 
</СЕТ SUPPORTED BOOT MODE» 
</RIBCL> 


GET_SUPPORTED_BOOT_MODE runtime errors 


None 


GET_SERVER_NAME 


Use GET_SERVER_NAME command to retrieve the host server name used by iLO. 


For example: 


<RIBCL version="2.0"> 
<LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
<SERVER_INFO MODE="READ" > 
«GET SERVER NAME /> 
«/SERVER INFO» 
«/LOGIN» 
«/RIBCL» 


The iLO firmware maintains consistency between the various places the server name is used. The host RBSU has a two- 
line limitation of 14 characters each, or 28 characters of total server name text length. 


Normally, HPE ProLiant Management Agents are used to forward the server name attribute to iLO. This command can be 
used in instances where management agents are not used. However, the host operating system remains unaffected. 


GET, SERVER NAME return message 


GET SERVER NAME returns the currently stored server name, operating system name, and the operating system version, 
if available. The server name is a quoted ASCII string and cannot be a network name. 


For example: 
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<5 


<5 


Раск 1 


<5 


ERVER NAME VALUE-"WIN-DPOHJLI9DO8" /> 


ERVER OSNAME VALUE-"Windows Server 2008 R2, x64 


"/> 


ERVER OSVERSION VALUE="6.1"/> 


GET, SERVER NAME runtime errors 


None 


SERVER NAME 


The SERVER NAME command is used to assign the Server Name attribute shown in the user interface and host RBSU. 
This setting is not forwarded to the host operating system and does not affect the host operating system. 


Enterprise Edition Service 


You must have the Configure iLO Settings privilege to change this attribute using the scripting interface. The 
SERVER INFO section must be set to WRITE mode or an error is returned. 


For example: 


<КІВС 


L version="2.0"> 


«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 


«/8 


«SERVER INFO MOD 


="wri 


te" > 


«SERVER NAME VALUE = " 


Exchange05" /» 


ERVER INFO» 


«/LOGIN» 


</RII 


BCL> 


SERVER_NAME parameters 


VALUE is a quoted ASCII string less than 50 characters in total length. 


SERVER_NAME return message 


If this attribute is successfully set, no specific message returns. 


SERVER_NAME runtime errors 


If the configure iLO settings privilege is absent, a runtime error is returned: 


User does NOT have correct privilege for action. CONFIG ILO PRIV required. 


If SERVER INFO is not opened for write, a runtime error is returned. 


Server information is open for read-only access. Write access is required 


for 


this operation. 


GET PRODUCT NAME 


The GET PRODUCT. NAME command returns the name and model of the queried server. The specified user must have a 
valid iLO account to execute RIBCL commands. For this command to parse correctly, the command must appear within a 
SERVER INFO command block. You can set the SERVER INFO MODE to read or write. 


For example: 
<RIBCL VERSION-"2.0"» 
« 
«SERVE 


Cc} 


«GET PRODUCT МАМ 


E/» 


LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
iR INFO MODE="read"> 
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«/SERVER INFO» 
«/LOGIN» 
</RIBCL> 


GET_PRODUCT_NAME runtime errors 


None. 


GET_PRODUCT_NAME return messages 


A possible GET PRODUCT NAME return message includes: 


<RIBCL VERSION-"2.22"» 
«RESPONSE 
STATUS-"0x0000" 

MESSAGE='No error' 

/> 

«GET PRODUCT NAME» 

«PRODUCT NAME VALUE -"ProLiant BL420c Gen8"/» 
«/GET PRODUCT МАМЕ> 

«/RIBCL» 


GET EMBEDDED HEALTH 


The GET EMBEDDED HEALTH command is used to retrieve server health information. For this command to parse 
correctly, the GET EMBEDDED HEALTH command must appear within a SERVER INFO command block. You can set 
SERVER INFO MODE to read or write. 


For example: 


«RIBCL VERSION="2.0"> 

«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE-"read"» 
«GET EMBEDDED HEALTH /» 
«/SERVER INFO» 

«/ LOGIN» 

</RIBCL> 


E 


An expanded version is also available (see example below). Not all tags are required, however if no tags are specified then 
the command operates as if all the tags are listed and outputs all of the embedded health data: 


T 


<RIBCL VERSION="2.22"> 


<LOGIN USER_LOGIN="adminname" PASSWORD="password"> 
<SERVER_INFO MODE="read"> 

<GET_EMBEDDED_HEALTH> 
«GET ALL ҒАМ5/> 
<СЕТ ALL TEMPERATURES/» 
«GET ALL POWER SUPPLIES/» 
«GET ALL VRM/» 
«GET ALL PROCESSORS/» 
«GET ALL MEMORY/> 
«GET ALL NICS/» 
«GET ALL STORAGE/» 
«GET ALL HEALTH STATUS/> 

<!-- Following tag is for iLO 4 1.30 or later. ==> 

<GET ALL FIRMWARE VERSIONS/> 

</GET EMBEDDED HEALTH» 
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</5 ЕКУЕК ІМЕ о> 
«/LOGIN» 
</RIBCL> 


GET_EMBEDDED_HEALTH parameters 


None 


GET_EMBEDDED_HEALTH return messages 


NOTE: PART NUMBER (for MEMORY_DETAILS) is only returned for HPE Smart Memory. 


For a sample return message, see Sample return for GET EMBEDDED HEALTH. 


NOTE: 
Variable POWER SUPPLIES tags 


e The POWER SUPPLIES tags HP. POWER DISCOVERY SERVICES REDUNDANCY STATUS апа 
HIGH, EFFICIENCY. MODE appear only for blade servers. 


• Тһе following POWER SUPPLIES tags appear only when SNMP is available, otherwise they are replaced Бу the tags 
SUPPLY LABEL AND SUPPLY STATUS: 


о PRESENT 
° PDS 
о HOTPLUG_CAPABLE 
о MODEL 
о SPARE 
о SERIAL NUMBER 
о CAPACITY 
о FIRMWARE VERSION 
• Тһе following POWER SUPPLIES tags appear only when ап iPDU is present: 
о POWER DISCOVERY. SERVICES IPDU SUMMARY 
о |PDU 
° BAY 
о STATUS 
о РАВТ_МОМВЕК 
о SERIAL NUMBER 
о МАС ADDRESS 


о (РО LINK 


GET POWER, READINGS 


The GET POWER READINGS command is used to get the power readings from the server power supply. 
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Еог ехатріе: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="read"> 
«GET POWER READINGS/» 
«/SERVER INFO» 
«/LOGIN» 
</RIBCL> 


т 


GET. POWER READINGS parameters 


None 


GET, POWER READINGS return messages 


Two types of responses are available from the GET POWER READINGS command, depending on whether or not an 
advanced license is applied. 


If an advanced license is not applied, a typical response is: 


<?xml version="1.0"?> 
RIBCL VERSION-"2.22"» 
RESPONSE 
TATUS-"0x0000" 

ESSAGE='No error' 


T 


V 


GET POWER READINGS» 

PRESENT POWER READING VALUE-"275" UNIT-"Watts"/» 
/GET POWER READINGS» 

/RIBCL» 


< 
< 
5 
М 
/ 
< 
< 
< 
< 


If an advanced license is applied, а typical response is: 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.22"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 
/ 

< 

< 


GET POWER READINGS» 

R READING VALUE-"275" UNIT-"Watts"/» 
EADING VALUE-"278" UNIT-"Watts"/» 
EADING VALUE-"283" UNIT-"Watts"/» 
E . READING VALUE="270" UNIT="Watts"/> 
«/GET POWER READINGS» 


U 
"Jj 
о 
А 
У 
"d 
О | 
= 


GET PWREG 


The GET PWREG command gets the power alert threshold for iLO 5 devices. For this command to parse correctly, the 
GET. PWREG command must appear within a SERVER INFO command block, and SERVER INFO MODE can be set to read 
or write. You must purchase the iLO Advanced license to enable this feature. 
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Еог ехатріе: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="read"> 
«GET PWREG/> 
</SERVER_INFO> 
</LOGIN> 
</RIBCL> 


ез 


СЕТ PWREG parameters 


None 


СЕТ PWREG return messages 


A GET PWREG return message includes: 


XRESPONSE STATUS-"0x0000" MSG="No Errors"/» 

GET PWREG» 

PCAP MODE-"OFF"»«/PCAP» 

EFFICIENCY MODE>"3"</EFFICIENCY MODE> 

PWRALERT TYPE-"AVERAGE" THRESHOLD="600" DURATION="60"></PWRALERT> 
«GET HOST POWER HOST POWER-"ON"/» 

</СЕТ PWREG> 


NA A A 


• PCAP mode is either set to MAN followed Бу a positive integer, or set to OFF. 


e EFFICIENCY MODE is a number between 1 and 4: 
о 1— PWRREGMODE OS. CONTROL 


о 2— PWRREGMODE STATIC LOW 
о 35 — PWRREGMODE DYNAMIC 


о 4 — PWRREGMODE STATIC HIGH 


• СЕТ HOST. POWER reports whether the virtual power button is enabled. 


GET PWREG runtime errors 
Possible GET. PWREG runtime errors: 


* Feature not supported. 


* This feature requires a supported license key. 


SET PWREG 


The SET. PWREG command sets the power alert threshold for iLO 5 devices. For this command to parse correctly, the 
SET PWREG command must appear within a SERVER INFO command block, and SERVER INFO MODE can be set to 
write. You must purchase the iLO Advanced license to enable this feature. 


For example: 


<RIBCL VERSION="2.0"> 
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«LOGIN USER LOGIN-"adminame" PASSWORD-"password"» 
«SERVER INFO MODE="write"> 
«S PWREG» 


ET 
<PWRALERT ТҮРЕ-"РЕАК"/> 
< 


«/SET РИКЕС> 
«/SERVER INFO» 
«/ LOGIN» 


</RIBCL> 


SET_PWREG parameters 


PWRALERT TYPE—Valid values are: 


DISABLED—No power alerts are set. 


PWRALERT SETTINGS THRESHOLD="200" DURATION="35"/> 


PEAK—Represents the half-second average power reading during the sample. 


AVERAGE—Represents the mean power reading during the sample. 


PWRALERT_SETTINGS 


THRESHOLD—Sets the alert threshold, in watts. 


DURATION—Sets the length of the sample time, in minutes, starting at 5. Duration will always be in 5 minute intervals 
up to 240 minutes maximum. Any positive integer can be used, but it will be rounded off to the nearest 5. 


SET PWREG runtime errors 


Possible SET PWREG error messages include: 


Server information is open for read-only access. 


for this operation. 
Internal error. 


The value specified is invalid. 


This feature requires a supported license key. 


User does NOT have correct privilege for action. 


The PWRALERT value is invalid. 


The THRESHOLD value is invalid. 


Write access is required 


CONFIG ILO PRIV required. 


The DURATION value is invalid. Values supported are between 1 and 240. 


Invalid integer. 


GET POWER CAP 


The GET POWER CAP command is used to get the power cap of the server. For this command to parse correctly, the 


GET. POWER CAP command must appear within a SERVER INFO command block. You can set the SERVER. INFO MODE 
to read or write. You must purchase the iLO Advanced license to enable this feature. 


For example: 


<RIBCL VERSION="2.0"> 


«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 


Cc} 
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«SERVER INFO MODE="read"> 
«GET POWER CAP/» 
«/SERVER INFO» 
«/LOGIN» 
</RIBCL> 


GET_POWER_CAP parameters 


None 


GET_POWER_CAP return messages 


A cap value of zero indicates a power cap is not currently set on the server. 


SET_POWER_CAP 


The SET. POWER CAP command is used to set a power сар on the server. For this command to parse correctly, the 
SET POWER CAP command must appear within a SERVER INFO command block, and SERVER INFO MODE must be set 
to write. You must have the Configure iLO Settings privilege to execute this command. 


You cannot set this property if a dynamic power cap is set for the server. Dynamic power capping is set and modified 
using either Onboard Administrator or Insight Power Manager. You must purchase the iLO Advanced license to enable 
this feature. 


For example, enabling the power cap: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="write"> 
«SET POWER CAP POWER CAP-"300"/» 
«/SERVER INFO» 
«/LOGIN» 
</RIBCL> 


Tj 


T 


SET_POWER_CAP parameters 


SET POWER CAP POWER CAP is the power cap on the server. Valid power cap values are determined using a power test 
run on the server at boot. The possible values are O to disable the power cap, or a numeric value in watts (as determined 
in the power test.) 


SET POWER CAP runtime errors 


The possible SET POWER CAP error messages include: 


e Server information is open for read-only access. Write access is required 
for this operation. 


* Power Regulator feature is not supported on this server. 
* User does not have correct privilege for action. 


* The power cap value is invalid. 
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SET CRITICAL TEMP REMAIN OFF 


The SET CRITICAL TEMP REMAIN, OFF command controls the behavior of a server after shutting down due to critical 
temperature. For this command to parse correctly, the command must appear within a SERVER, INFO command block, and 
SERVER INFO MODE must be set to write. The user must have the Configure iLO Settings privilege to execute this 
command. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
«SERVER INFO MODE="write"> 
«SET CRITICAL TEMP REMAIN OFF VALUE="No"/> 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


T 


I 


SET. CRITICAL TEMP. REMAIN, OFF parameters 


SET CRITICAL TEMP REMAIN, OFF controls the reaction of the server after a critical temperature shutdown. A value of 
No (the default) sets the server to automatically power on after a critical temperature shutdown. A value of Yes sets the 
server to remain powered off after a critical temperature shutdown. 


SET CRITICAL, TEMP REMAIN, OFF runtime errors 
The possible SET CRITICAL TEMP REMAIN, OFF error messages include: 


* Server information is open for read-only access. Write access is required 
for this operation. 


* User does NOT have correct privilege for action. CONFIG ILO PRIV required. 


СЕТ CRITICAL. TEMP REMAIN OFF 


Тһе GET CRITICAL, TEMP REMAIN, OFF command retrieves the critical temperature shutdown behavior of the server. 
For this command to parse correctly, the command must appear within a SERVER INFO command block. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
«SERVER INFO MODE="read"> 
«GET CRITICAL TEMP REMAIN OFF/» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


ІЗІ 


T 


GET, CRITICAL TEMP REMAIN OFF return messages 


Information is returned within one of the following responses: 


* «CRITICAL TEMP REMAIN OFF VALUE="Yes"/> 


* «CRITICAL TEMP REMAIN OFF VALUE="No"/> 


GET HOST, POWER SAVER STATUS 


The GET HOST POWER SAVER STATUS command requests the state of the processor power regulator feature of the 
server. For this command to parse correctly, the GET HOST. POWER SAVER, STATUS command must appear within a 
SERVER INFO command block. You can set SERVER, INFO MODE to read or write. 
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Еог ехатріе: 


<КІВС 


, V] 


«LOGIN 


US 


ERSION-"2.0"» 
ER LOGIN-"adminname" PASSWORD-"password"» 


<S 


h 


RV. 


т 


«G] 


ET 
Б 
Е 


iR INFO MODE 


-"read"» 


HOST POWER 


SAV 


«/8 


ERV 


ER INFO» 


«/LOGIN» 
</RIBCL> 


ER STATUS/> 


GET_HOST_POWER_SAVER_STATUS parameters 


None 


GET_HOST_POWER_SAVER_STATUS runtime errors 


The possible GET HOST POWER SAVER STATUS error messages include: 


Feature not supported 


GET HOST POWER SAVER STATUS return messages 


Information is returned within one of the following responses: 


«G] 


«G] 


«G] 


«G] 


ET HOST 


POWER 


SAVER HOST 


ET HOST 


POWER 


SAVER HOST 


ET HOST 


POWER 


SAVER HOST 


ET HOST 


POWER 


SAVER HOST 


SET HOST POWER SAVER 


The SET HOST POWER SAVER command is used to set the Power Regulator Setting for the server processor. For this 
command to parse correctly, the SET HOST POWER SAVER command must appear within a SERVER INFO command 
block, and SERVER INFO MODE must be set to write. The user must have the Virtual Power and Reset privilege to 

execute this command. 


POWER SAVER- "OFF"/» 
POWER SAVER- "МІМ"/> 
POWER SAVER- "AUTO"/» 
POWER SAVER- "MAX"/» 


NOTE: If you set the HOST POWER SAVER parameter to 1, you must reboot the server to enable the change. 


For example: 
<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE-"write"» 
«!-- Modify the HOST POWER SAVER attribute to modify 
power saver on the host server --> 
«SET HOST POWER SAVER HOST POWER SAVER-"1"/» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 
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SET HOST POWER SAVER parameters 


The HOST. POWER, SAVER command controls the Dynamic Power Saver feature of the server processor if the feature is 
supported. The possible values are: 


* 1 
—Operating system control mode 
e 2 
—HPE Static Low Power mode 
e 3 
—HPE Dynamic Power Savings mode 
• 4 


—HPE Static High Performance mode 


NOTE: If you set the HOST POWER SAVER parameter to 1, you must reboot the server to enable the change. 


SET, HOST POWER, SAVER runtime errors 


The possible SET HOST. POWER error messages include: 


* Server information is open for read-only access. Write access is required 
for this operation. 


* Power Regulator feature is not supported on this server. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


GET HOST POWER STATUS 


The GET HOST POWER STATUS command requests the power state of the server. For this command to parse correctly, 
the GET HOST POWER STATUS command must appear within a SERVER INFO command block. You can set 
SERVER INFO MODE to read or write. 


For example: 


<RIBCL VERSION-"2.0"» 

«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="read"> 
<GET HOST POWER STATUS/> 
</SERVER_INFO> 

</LOGIN> 

</RIBCL> 


T 


GET_HOST_POWER_STATUS parameters 


None 


GET_HOST_POWER_STATUS runtime errors 


The possible GET_HOST_POWER_STATUS error messages include: 
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* Host power is OFF. 


* Host power is ON. 


СЕТ HOST POWER STATUS Return Messages 


The following information is returned within the response: 


T 


«GET HOST POWER 
HOST POWER-"OFF"/» 


SET HOST POWER 


The SET HOST POWER command is used to toggle the power button of server. For this command to parse correctly, the 
SET HOST POWER command must appear within a SERVER. INFO command block, and SERVER INFO MODE must be 
set to write. The user must have the Virtual Power and Reset privilege to execute this command. 


For example: 
<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="write"> 
<!-- Modify the HOST POWER attribute to toggle power on the host server --> 
<!-- HOST POWER="No" (Turns host server power off) --> 
<!-- A graceful shutdown will be attempted for ACPI-aware ==> 
<!-- operating systems configured to support graceful shutdown. --> 
«!-- HOST POWER-"Yes" (Turns host server power on) --> 
«SET HOST POWER HOST POWER-"No"/» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


SET_HOST_POWER Parameters 


HOST_POWER enables or disables the Virtual Power Button. The possible values are Yes or No. 


SET_HOST_POWER Runtime Errors 


The possible SET HOST POWER error messages include: 


* Server information is open for read-only access. Write access is required 
for this operation. 


* Virtual Power Button feature is not supported on this server. 
e Host power is already ON. 


* Host power is already OFF. 


* User does not have correct privilege for action. RESET SERVER PRIV 
required. 
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GET HOST PWR, MICRO, VER 


Тһе GET HOST PWR . MICRO, VER command provides the power micro version number. Тһе 
GET. HOST. PWR MICRO VER command must appear within a SERVER INFO command block to parse correctly. You can 
set the SERVER INFO MODE to read or write. 


For example: 


<RIBCL VERSION="2.0"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
ІК INFO MODE="read"> 
«GET HOST PWR MICRO VER/> 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


A 
n 
E 
< 


GET_HOST_PWR_MICRO_VER parameters 


None 


GET_HOST_PWR_MICRO_VER runtime errors 


The possible GET HOST PWR MICRO. VER error messages include: 


e Error—lf the power micro cannot be read (hardware problem). 


e Power Off—lIf the server is powered off. The power micro is still displayed. 


• N/A-—If the server does not support a power micro. 


GET HOST PWR MICRO VER return messages 


e No errors and displays version information: 


«GET HOST PWR MICRO VER» 
«PWR MICRO VERSION-"2.3"/» 
</GET HOST PWR MICRO VER» 


ІЗІ 


e Failed to read power micro version: 


«GET HOST PWR MICRO VER» 
«PWR MICRO VERSION="Error"/> 
«/GET HOST PWR MICRO VER» 


e Power micro not supported on the server: 


«GET HOST PWR MICRO VER» 
«PWR MICRO VERSION="UNKNOWN"/> 
</GET HOST PWR MICRO VER» 


RESET SERVER 


The RESET. SERVER command forces a warm boot of the server if the server is currently on. For this command to parse 
correctly, the RESET SERVER command must appear within a SERVER INFO command block, and SERVER INFO MODE 
must be set to write. The user must have the Virtual Power and Reset privilege to execute this command. 
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Еог ехатріе: 


<RIBCL VERSION-"2.0"» 

«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="write"> 

<RESET SERVER/> 
</SERVER_INFO> 

</LOGIN> 

</RIBCL> 


E 


RESET_SERVER error messages 


The possible RESET_SERVER error messages include: 


e Server information is open for read-only access. Write access is required 
for this operation. 


* Host power is already OFF. 


* User does NOT have correct privilege for action. RESET SERVER PRIV 
required. 


RESET SERVER parameters 


None 


PRESS PWR. BTN 


The PRESS. PWR BTN command is used to simulate a physical press Cor press and hold) of the server power button. For 
this command to parse correctly, the PRESS. PWR ВТМ command must appear within a SERVER INFO command block, 
and SERVER INFO MODE must be set to write. The user must have the Virtual Power and Reset privilege to execute this 
command. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"adminname" PASSWORD-"password"» 
«SERVER INFO MODE="write"> 
«PRESS PWR BTN/» 
«/SERVER INFO» 
«/LOGIN» 
</RIBCL> 


Е 


PRESS PWR ВТМ parameters 


None 


PRESS. PWR BTN runtime errors 


The possible error messages include: 
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* Server information is open for read-only access. Write access is required 
for this operation. 


* User does not have correct privilege for action. RESET SERVER PRIV 
required. 


SERVER AUTO PWR 


The SERVER AUTO PWR command is used to set the automatic power on and power on delay settings. Any power delays 
set using this command are invoked after iLO is running. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 


«SERVER INFO MODE-2"write"» 
«!-- Enable automatic power on --> 
«SERVER AUTO PWR VALUE-"On"/» 
«/SERVER INE O> 
</LOGIN> 
</RIBCL> 


NOTE: Enabling a power on delay using the SERVER AUTO PWR command requires you to run the script twice. First, run 
the script and set the SERVER AUTO PWR value to On. Next, run the script with a value of 15, 30, 45, 60 to set up the 
power on delay. 


SERVER, AUTO PWR parameters 


The available values for the VALUE parameter are: 


* Yes 
—Enables automatic power on CAPO) with a minimum delay. 
* No 
—APO restores last power state. 
* 15, 30, 45, 60 
—Sets APO delay time in seconds. 
* Random 
—Sets an automatic power on with a random delay of up to 2 minutes. 
e On 
—APO always powers on. 
* Off 
—APO always remains off. 
* Restore 


—Restores last power state before power interruption. 
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SERVER AUTO PWR runtime errors 


The possible errors include: 


* User does not have correct privilege for action. Configure iLO privilege is 
required 


* SERVER INFO mode is not WRITE 


* The value specified for SERVER AUTO PWR is invalid or not accepted on 
blades 


СЕТ SERVER, AUTO PWR 


The GET SERVER AUTO PWR command is used to get the automatic power on and power on delay settings of the 
server. The command is supported by all iLO 5 firmware versions. 


For example: 


<RIBCL VERSION="2.0"> 

<LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
«SERVER INFO MODE="read"> 
«GET SERVER AUTO PWR /> 
«/SERVER INFO» 

</LOGIN> 

</RIBCL> 


GET_SERVER_AUTO_PWR parameters 


None 


GET_SERVER_AUTO_PWR return message 


Possible GET_SERVER_AUTO_PWR return is: 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.22"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 
“> 
<СЕТ SERVER AUTO PWR» 
<== 


Automatically Power On Server is enabled to power-on. 
Power On Delay is random. 

--> 
«SERVER AUTO РИК VALUE-"ON" /» 
</СЕТ SERVER AUTO PWR» 
</RIBCL> 
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GET UID STATUS 


The GET UID. STATUS command requests the state of the server UID. For this command to parse correctly, the 
GET. UID STATUS command must appear within a SERVER, INFO command block. You can set SERVER INFO MODE to 


read. 


For example: 


<КІВС 


«LOGIN 


, V] 


ERSION-"2.0"» 


USER LOGIN-"adminname" PASSWORD="password"> 


RVE 


«SE 


«G] 


«/8 


R INFO MODE="read"> 


ET UID STATUS /» 


ERV 


ER INFO» 


«/LOGIN» 
</RIBCL> 


GET_UID_STATUS parameters 


None 


GET_UID_STATUS response 


The following information is returned within the response: 


«GET UID STATUS UID="0FF"/> 


«GET UID STATUS UID="Flashing"/> 


UID CONTROL 


The UID CONTROL command toggles the server UID. For this command to parse correctly, the UID CONTROL command 
must appear within a SERVER INFO command block, and SERVER INFO MODE must be set to write. 


For example: 

<RIBCL VERSION="2.0"> 

<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="write"> 
<!-- Modify the UID attribute to toggle UID on the host server --> 
<!-- UID="No" (Turns host server UID off) --> 
<!-- UID="Yes" (Turns host server UID on) --> 
«UID CONTROL UID="Yes"/> 
</SERVER_INFO> 

</LOGIN> 

</RIBCL> 


UID_CONTROL parameters 


UID determines the state of the UID. A value of Yes turns the UID light on, and a value of No turns the UID light off. 


UID_CONTROL errors 


The possible UID CONTROL error messages include: 
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* Server UID is already ON. 
* Server UID is already OFF. 


e Server UID status cannot be changed while UID is blinking. 


SET PERS MOUSE KEYBOARD ENABLED 


The SET. PERS. MOUSE KEYBOARD ENABLED command sets the persistent mouse and keyboard setting. The possible 
values are Y Cenabled) or N (disabled). For this command to parse correctly, the command must appear within a 
SERVER INFO command block. You must set SERVER INFO MODE to write. 


T 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="write"> 
«SET PERS MOUSE KEYBOARD ENABLED VALUE-"y"/» 
«/SERVER INFO» 
</LOGIN> 
</RIBCL> 


E 


T 


SET_PERS_MOUSE_KEYBOARD_ENABLED parameters 


SET_PERS_MOUSE_KEYBOARD_ENABLED—Configures persistent keyboard and mouse. Valid values аге Ү (enabled) and 
N (disabled). 


SET_PERS_MOUSE_KEYBOARD_ENABLED runtime errors 
The possible runtime errors are: 
e There was an error on setting the persistent mouse and keyboard. 


iLO information is open for read-only access. Write access is required for 
this operation. 


* User does NOT have correct privilege for action. CONFIG ILO PRIV required. 


* Invalid Boolean (Appears when a parameter value other than Y or N is used.) 


СЕТ PERS MOUSE KEYBOARD ENABLED 


GET PERS MOUSE KEYBOARD. ENABLED returns the persistent mouse and keyboard status. A return value of Y 
indicates that persistent mouse and keyboard is enabled. A return value of N indicates it is disabled. 


For example: 


T 


<RIBCL VERSION="2.0"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
«SERVER INFO MODE="read"> 
<GET PERS MOUSE KEYBOARD ENABLED/> 
</SERVER_INFO> 
</LOGIN> 
</RIBCL> 


E 


GET_PERS_MOUSE_KEYBOARD_ENABLED parameters 


None 
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СЕТ PERS MOUSE KEYBOARD ENABLED return messages 


A possible GET PERS MOUSE KEYBOARD. ENABLED message is: 


ONSE 


ESSAG 


«GET 


PERS 


1 VERSION-"2.22"» 


TATUS-"0x0000" 
E-'No error' 


MOUSE KEYBOARD 


«/GET 


«/RIB 


GET SERVER, POWER ON, TIME 


CL» 


ERSMOUSE 
D 


ENABLED VA 


ENABLED» 
Оа 


PERS MOUSE KEYBOARD ENABLED» 


The СЕТ. SERVER POWER ON. TIME command is used to retrieve the virtual clock value, in minutes, since the server was 
last powered on. For this command to parse correctly, the GET SERVER. POWER ON, TIME command must appear within 


a SERVER INFO command block. You can set SERVER INFO MODE to read or write. 


For example: 


«RIBC 
«L 


L VE 
OGIN 


US 


RSION-"2.0"» 
ER LOGIN-"adminname" 


«SE 


RVE 


</5 


R INFO MODE-"read"» 


«GET SERVER POW 


ER ON TIMI 


ERV 


ER INFO» 


</LOGIN> 


</RIB 


CL> 


ІЗІ 


/> 


СЕТ SERVER, POWER, ОМ TIME parameters 


None. 


СЕТ SERVER, POWER ОМ TIME return message 


A possible GET SERVER. POWER ON. TIME return is: 


«SERV. 


ER P 


OWER ON MINUTI 


ES VALUE-"33815 


CLEAR, SERVER, POWER, ON TIME 


The CLEAR. SERVER, POWER ON, TIME command is used to clear the virtual clock counter without power-cycling the 
server. For this command to parse correctly, the CLEAR SERVER, POWER ON, TIME command must appear within a 
SERVER INFO command block, and SERVER, INFO MODE must be set to write. 


For example: 


<КІВС 
«L 


L VE 
OGIN 


US 


RSION-"2.0"» 
ER LOGIN-"Administrator" 


«SE 


T 


RV 


«/8 


«CL 


iR INFO MODE-"write"» 


ІЗІ 


EAR SERVER POWER ОМ ТІМІ 


ERV 


ER INFO» 


</LOGIN> 


</RIB 


CL> 


CLEAR_SERVER_POWER_ON_TIME parameters 


None. 


Cc} 


" 


PASSWORD="password"> 


/> 


PASSWORD="password"> 


/> 
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CLEAR SERVER POWER ОМ TIME return message 


None. 


NOTE: To verify the command, use the GET SERVER POWER ОМ TIME comand and verify it returns the following 
message: 


«SERVER POWER ON MINUTES VALUE="0" /» 


SSO INFO 


The SSO INFO MODE command can only appear within a LOGIN command block. Only commands that are SSO INFO 
MODE-type commands are valid inside the SSO INFO MODE command block. 


SSO INFO MODE requires the MODE parameter with a value of read or write. MODE is a specific string parameter with a 
maximum length of 10 characters that specifies what you intend to do with the information. 


Write mode enables both reading and writing of iLO information. Read mode prevents modification of the iLO information. 
You must have the Configure iLO Settings privilege to execute this command. 


For example: 


«SSO INFO MODE="write"> 


— 550 INFO commands ..... 


«/SSO INFO» 


Deleting a SSO SIM Server Record by index number example: 


Lr] 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"Administrator" PASSWORD-"password"» 
«SSO INFO MODE="write"> 
«DELETE SERVER INDEX="6" /> 
</SSO_INFO> 
</LOGIN> 
</RIBCL> 


GET_SSO_SETTINGS 


The GET_SSO_SETTINGS command is used to retrieve SSO settings for iLO. For this command to parse correctly, the 
GET_SSO_SETTINGS command must appear within а 550 INFO command block, апа SSO INFO MODE can be set to read 
or write. 


For example: 


<RIBCL VERSION="2.0"> 

«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
<550 INFO MODE="read"> 
«GET 550 SETTINGS/» 
</550 INFO» 

</LOGIN> 


</RIBCL> 
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NOTE: The information returned Бу GET. SSO SETTINGS has not been enhanced to support the extended privileges 
available from the iLO 5 web interface. For more information about user and group privileges in iLO 5, see the HPE iLO 5 
User Guide in the HPE Information Library at http://www.hpe.com/info/ilo/docs. 


СЕТ SSO SETTINGS parameters 


None 


GET, SSO SETTINGS return messages 


The following is an example of an SSO settings response from a configured iLO device. There are O or more SSO SERVER 
records reflecting the number of stored server records in each. 


«GET SSO SETTINGS» 
«TRUST MODE VALUE-"CERTIFICATE" /» 
«USER ROLE LOGIN PRIV-"Y" /» 
«USER ROLE REMOTE CONS PRIV-"N" /» 
«USER ROLE RESET SERVER PRIV-"N" /> 
«USER ROLE VIRTUAL MEDIA PRIV-"N" /> 

C D 

A 


T 


iR ROLE PRIV-"N" /» 
К ROLE "ы" /> 
RATOR ROLE LOGIN PRIV-"Y" /» 
RATOR ROLE REMOTE CONS PRIV-"Y" /» 
RESET SERVER PRIV-"Y" /» 
; VIRTUAL MEDIA PRIV-"Y" /» 
RATOR ROLE CONFIG ILO PRIV-"N" /» 
ADMIN PRIV-"N" /» 
MINISTRATOR ROLE LOGIN PRIV-"Y" /» 
REMOTE CONS PRIV-"Y" /» 
| RESET SERVER PRIV-"Y" /» 
MINISTRATOR ROLE VIRTUAL MEDIA PRIV-"Y" /» 
E 
A 


^ 
а 
ca 


^ 
g 
ca 


о 
Z 
H 
z 
ідэ] 
H DH 
H 
T 


ai 


E: A сз са сз cn 


MINISTRATOR ROLE CONFIG ILO PRIV-"Y" /> 
«ADMINISTRATOR ROLE ADMIN PRIV-"Y" /» 
«880 SERVER INDEX="0" 

ISSUED TO="viv.hp.com" 

ISSU 

VALI 
VALI 


ED BY-"viv.hp.com" 

D FROM="0611081920592" 

D UNTIL-"1611081920592"» 
V,RTIFICATE----- 


І 

| 

| 

| 

І 
UJ 
a 
Ей 
4 
Q 


нае END CERTIFICATE----- 
</550 SERVER» 

«880 SERVER INDEX="1"> 
ant.hp.com 
</550 SERVER» 
</СЕТ 550 SETTINGS» 


MOD SSO SETTINGS 


The MOD SSO SETTINGS command is used to modify the SSO settings for iLO 5. For this command to parse correctly, 
the MOD. SSO SETTINGS command must appear within а SSO INFO command block, and SSO INFO MODE must Бе set 
to write. The user must have the Configure iLO Settings privilege to execute this command. 
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NOTE: MOD 550 SETTINGS has not been enhanced to support the extended privileges available from the iLO 5 web 


interface. For more information about user and group privileges in iLO 5, see the HPE iLO 5 User Guide in the HPE 
Information Library at http://www.hpe.com/info/ilo/docs. 


For example: 


<RIBCL VERSION-"2.0"» 
«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
«SSO INFO MODE="write"> 
«MOD SSO SETTINGS» 
<!-- Specify the desired trust mode Options: DISABLED (default), 
CERTIFICATE (recommended), NAME, or ALL --> 
«TRUST MODE-"CERTIFICATE" /> 
<!-- Specify the privileges assigned to the user role --> 
«USER ROLE LOGIN PRIV-"Y" /> 
«USER ROLE REMOTE CONS PRIV-"N" /> 
«USER ROLE RESET SERVER PRIV-"N" /> 
«USER ROLE VIRTUAL MEDIA PRIV="N" /> 
«USER ROLE CONFIG ILO PRIV-"N" /» 
«USER ROLE ADMIN PRIV-"N" /> 
<!-- Specify the privileges assigned to the operator role --> 
<ОРЕКАТОК ROLE LOGIN PRIV-"Y" /? 
«OPERATOR ROLE REMOTE CONS PRIV-"Y" /> 
<ОРЕКАТОК ROLE RESET SERVER PRIV-"Y" /> 
<ОРЕКАТОК ROLE VIRTUAL MEDIA PRIV-"Y" /> 
«OPERATOR ROLE CONFIG ILO PRIV-"N" /> 
<ОРЕКАТОК ROLE ADMIN PRIV-"N" /> 
<!-- Specify the privileges assigned to the administrator role --> 
<ADMINISTRATOR ROLE LOGIN PRIV-"Y" /> 
«ADMINISTRATOR ROLE REMOTE CONS PRIV-"Y" /> 
<ADMINISTRATOR ROLE RESET SERVER PRIV-"Y" /> 
<ADMINISTRATOR ROLE VIRTUAL MEDIA PRIV-"Y" /> 
<ADMINISTRATOR ROLE CONFIG ILO PRIV-"Y" /> 
<ADMINISTRATOR ROLE ADMIN PRIV-"Y" /> 
<ADMINISTRATOR ROLE ADMIN PRIV-"Y" /? 
«/MOD SSO SETTINGS» 
</550 INFO» 
</LOGIN> 
</RIBCL> 


MOD SSO SETTINGS parameters 


TRUST MODE sets the Single Sign-On trust mode. The current setting is unchanged if this setting is omitted from the 


script. Accepted values are: 


* Disabled 


—Disables SSO on this processor. 


* Certificate 


—Accepts only SSO requests authenticated using a certificate. 


. Name 


Cc} 
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— Trusts 550 requests from the named SIM Server. 
* All 
—Accepts any SSO request from the network. 
Role names are used to associate iLO privileges. The specified privileges are set accordingly for that role, and a privilege 


that is omitted is unchanged. Enable a privilege for the role using the argument Y and disable the privilege for the role 
using the argument N. 


There are three roles for privilege assignment. Omitting a role leaves the current assignment unchanged: 


e USER ROLE 


—Privileges associated with User 


* OPERATOR КОШ 


ІЗІ 


—Privileges associated with Operator 


ІЗІ 


* ADMINISTRATOR КОШ 


—Privileges associated with Administrator 


For each role, you can manipulate multiple privileges. The privilege is specified within the role tag. If a privilege is omitted, 
the current value is unchanged. Each privilege assignment is Boolean and can be set to Y (privilege granted) or N 
(privilege denied). For more details on account privileges, see the User Administration section of the iLO User Guide on 
the Hewlett Packard Enterprise website at http://www.hpe.com/info/ilo/docs. 


* LOGIN PRIV 


— Allows login for this role. 


* REMOTE CONS PRIV 


—Grants access to remote console resources. 


* RESET SERVER PRIV 


— Grants access to power and reset controls. 


* VIRTUAL MEDIA PRIV 


T 


—Grants access to virtual media resources. 
e CONFIG ILO PRIV 

—Allows settings modification. 
* ADMIN PRIV 


—Allows local user account modification. 


MOD, 550 SETTINGS runtime errors 


Possible MOD SSO SETTINGS error messages include: 
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* Incorrect firmware version. 550 is only supported оп 110 4 v1.01 firmware 
or later. 


* User does not have correct privilege for action. CONFIG ILO PRIV required. 


* SSO INFO must be in write mode. 


SSO SERVER 


The SSO SERVER command is used to create SIM Trusted SSO Server records. For this command to parse correctly, it 
must appear within an SSO INFO command block, and SSO INFO MODE must be set to write. You must have the 
Configure iLO Settings privilege to execute this command. This command can be combined with MOD SSO SETTINGS. 


You can specify multiple SSO server records by using multiple instances of this command. The servers are added in the 
order that the records are specified. Duplicate records might be rejected and generate an error. The number of records 
stored by the lights-out processor depends on the size of the entries because certificates do not have a fixed size. Multiple 
certificates can normally be stored. 


There are three ways to add a SIM Trusted Server record using the SSO SERVER command: 


• Тһе server can be specified by network name (requires SSO trust level set to trust by name or trust all, but is not 
supported for trust by certificate). Use the fully qualified network name. 


• The server certificate can be imported by iLO 5 (the LOM processor requests the certificate from the specified SIM 
server using anonymous HTTP request). The iLO 5 processor must be able to contact the SIM server on the network 
at the time this command is processed for this method to work. 


e The server certificate can be directly installed on iLO 5. However, you must obtain the x.509 certificate in advance. 
This method enables you to configure the iLO 5 in advance of placing it on the network with the SIM server. The 
method also enables you to verify the contents of the SIM server certificate. For additional methods of obtaining the 
certificate from the SIM server, see the iLO User Guide on the Hewlett Packard Enterprise information library at http:// 
www.hpe.com/support/ilo-docs or the SIM User Guide at: http://www.hpe.com/info/hpsim/docs. 


For example: 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
<550 INFO MODE-"write"» 
<!-- Add ап SSO server record using the network name 
(works for TRUST MODE МАМЕ or ALL) --> 


«SSO SERVER NAME-"hpsiml.hp.net" /» 

<!-- Add ап 550 server record using indirect 110 import 
from the network name --> 

<550 SERVER IMPORT FROM-"hpsim2.hp.net" /» 

«!-- Add an SSO server certificate record using direct 
import of certificate data --> 

<ІМРОКТ CERTIFICATE» 
TRASSES BEGIN CERTIFICATE----- 
----- END CERTIFICATE----- 


T 


</IMPORT_CERTIFICATE> 
</SSO_INFO> 
</LOGIN> 
</RIBCL> 
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550 SERVER parameters 


NAME indicates that the server is being specified by network name. It receives a quoted string containing the fully 
qualified network name of the SIM Trusted Server. The name is not validated by iLO until an SSO login is attempted. For 
example, the syntax to add a SIM Trusted Server name: 


«SSO SERVER NAME-"hpsiml.hp.net" /» 


IMPORT. FROM indicates that iLO must request the SIM Trusted Server certificate from SIM. This request is implemented 
using an anonymous HTTP request similar to: 


http://<sim network address>:280/GetCertificate 


The iLO firmware requests the certificate when this command is processed. If the SIM server is unreachable, then an error 
occurs. 


For example, the syntax to have iLO import a server certificate resembles: 


<550 SERVER IMPORT FROM-"hpsim2.hp.net" /> 


IMPORT_CERTIFICATE indicates that iLO must import the literal .PEM encoded x.509 certificate data that follows. The 
data is encoded in a block of text that includes: 


----- ВЕСІМ СЕКТІЕІСАТЕ----- 


----- END CERTIFICATE----- 


For example, the syntax to import a SIM Trusted Server certificate resembles the following: 


^ 
о 
n 
O 
о 


| SERVER» 
===== BEGIN CERTIFICATE----- 
MIICG3TCCAKkKYCBESzwFUwDOYJKOoZIhvcNAQEFBOAwgbUXCZAJBgNVBAYTAlVTMRMWE... 
kXzhuVzPfWzQ-*a2E9tGAE/YgNGTfS9vKkVLUf6QoP/RQpYpkl5BxrsN3gM/PeT3zrxyTleE- 
===== END CERTIFICATE----- 

«/SSO SERVER» 


T 


The certificate is validated by iLO to ensure that it can be decoded before it is stored. An error results if the certificate is a 
duplicate or corrupt. 


The iLO firmware does not support certificate revocation and does not honor certificates that appear expired. You must 
remove revoked or expired certificates. 


SSO_SERVER runtime errors 


A runtime error is generated if the: 


e Certificate is a duplicate. 

e Certificate is corrupt. 

• СІМ server cannot be contacted using IMPORT FROM. 

e СІМ Trusted Server database is full (you must delete other records to make sufficient room їо add a new entry). 


e Trust mode is set incorrectly. 
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DELETE SERVER 


The DELETE SERVER command is used to remove a SIM Trusted SSO Server record. For this command to parse correctly, 
it must appear within an SSO INFO command block, and SSO INFO MODE must be set to write. You must have the 
Configure iLO Settings privilege to execute this command. 


You can specify multiple SSO server records by using multiple instances of this command. Delete records in the highest- 
to-lowest order if you want to delete multiple records at the same time. 


For example: 


Lr] 


<RIBCL VERSION="2.0"> 
«LOGIN USER LOGIN-"Administrator" PASSWORD="password"> 
<550 INFO MODE="write"> 
«DELETE SERVER INDEX-"6" /» 
</550 INFO» 
</LOGIN> 
</RIBCL> 


DELETE_SERVER parameters 


INDEX indicates the record number to delete. This number is consistent with the index returned using a 
GET_SSO_SETTINGS command. The index is O-based; that is the first record is index 0, the second record is index 1, and 
so on. 


DELETE SERVER runtime errors 


A runtime error is generated if the index is invalid. 


HARD DRIVE ZONE 


HARD DRIVE ZONE command blocks include drive bay mapping assignments, which assign drive bays in the system to 
particular nodes or host ports in the chassis. 


For example, on an HPE ProLiant XL170r Gen? Server with a 24-drive bay configuration and four server nodes, drive 
bays are allocated by default as shown: 


Od- 22-0 2253) 225) Е ga4-D 24-4) +0 ER 
е о е 
е Қ 22-2) 22-4) 22-6) E £42) 345) +O) 
= 11) 214) 8 2453) 2456) Ф 
T 212) 215) 23-1 d 235-3) 23-5) | 
213) 216) 23-2 8 3-4) 223-6) 


HARD. DRIVE ZONE commands сап only appear within the HARD. DRIVE ZONE block of a LOGIN command block. Only 
HARD. DRIVE. ZONE commands are valid inside the HARD. DRIVE ZONE command block. 


HARD DRIVE ZONE command blocks require the MODE parameter with a value of read or write. MODE is a specific string 
parameter with a maximum length of 10 characters that specifies what you intend to do with the information. 


Write mode enables both the reading and writing of iLO information. Read mode prevents modification of iLO information. 


For example: 


«LOGIN USER LOGIN-"administrator" PASSWORD="password"> 
«HARD DRIVE ZONE MODE-"read"» 
HARD DRIVE ZONE commands... 


</HARD DRIVE ZONE» 
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NOTE: HARD DRIVE ZONE commands are available only on systems that support it. Check your server model's 
specifications for compatibility. 


ZONE FACTORY DEFAULTS 


The ZONE FACTORY DEFAULTS command reverts the drive bay mapping for all host ports to the factory default map. 
The specified iLO user must have Administrative privileges to execute this command. For this command to parse correctly, 
it must appear within a HARD. DRIVE ZONE command block, and the mode value must be set to write. 


NOTE: The new mapping is not active until after the system is power cycled. 


For example: 


<КІВСІ. VERSION-"2.23"» 
«LOGIN USER LOGIN-"administrator" PASSWORD-"password"» 
«HARD DRIVE ZONE MODE-"write"» 
«ZONE FACTORY DEFAULTS> 
«TYPE ID value="1"/> 
«SEP NODE ID value="0"/> 
«/ZONE FACTORY DEFAULTS» 
</HARD DRIVE ZONE» 
</LOGIN> 
</RIBCL> 


T 


E 


ZONE_FACTORY_DEFAULTS parameters 


TYPE ID—Represents the type of Storage Enclosure Processor (SEP) configuration. The TYPE ID must be the same as 
the TYPE ID returned by the READ BACKPLANE INFO command. 


Type ID System Configuration Description 
Value 


1 TYPEI One SEP (with multiple bays) shared across multiple compute nodes. 

2 TYPE Il Multiple SEPs connected to multiple nodes in a 1-to-1 mapping. 

3 TYPE III Multiple SEPs with more than one SEP connected with each other, shared 
across multiple nodes - but no more than one SEP is directly connected to a 
node. 

4 TYPE IV Similar to TYPE III, except that more than one SEP is directly connected to a 
node. 


SEP. NODE ID— The node ID in which the SEP resides. Use the READ BACKPLANE INFO command to find the correct 
value. 


T 


ZONE_FACTORY_DEFAULTS runtime errors 


* Hard Drive Zone failed to write information to Backplane controller. 


* User information is open for read-only access. Write access is required for 


this operation 
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* User does МОТ have correct privilege for action. ADMIN PRIV required. 


* Hard Drive Zoning not available on this system. 


READ. BACKPLANE INFO 


TheREAD BACKPLANE INFO command is used to read hard drive backplane information. The return shows the 
current node to host port mapping, the number of host ports, and the drive bays available on the backplane. For this 
command to parse correctly, it must appear within a HARD. DRIVE ZONE command block, and the mode value must be 
set to read. 


T 


For example: 


<RIBCL VERSION-"2.23"» 
<LOGIN USER LOGIN="administrator" PASSWORD="password"> 
<HARD DRIVE ZONE MODE="read"> 
<READ BACKPLANE ІМЕО/> 
</HARD DRIVE ZONE» 
</LOGIN> 


</RIBCL> 


READ_BACKPLANE_INFO parameters 


None. 


READ_BACKPLANE_INFO runtime errors 


* Hard Drive Backplane Info read failed. 


* Hard Drive Zoning not available on this system. 


READ BACKPLANE INFO return messages 


The following response is typical of data returned by the READ BACKPLANE INFO command: 


т 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE-'No error' 
{> 
<READ BACKPLANE INFO> 
«TYPE ID>"1"</TYPE ID» 
«SEP NODE ID»"4"«/SEP NODE ID» 
<WWID>"50014380318db27£"</WWID> 
<SEP_ID>"0000"</SEP_ID> 
<BACKPLANE NAME>"HPE BACKPLANE"</BACKPLANE NAME> 
<FW_REV>"0.20"</FW_REV> 
<ВАҮ СМТ>"24"</ВАҮ CNT> 
«START ВАҮ>"1"</5ТАКТ ВАҮ> 
«END ВАҮ>"24"</ЕМр ВАҮ> 
«HOST PORT СМТ>"4"</НО5Т PORT CNT» 
«HOST PORT value-"1"» 
«NODE NUM»2"1"«/NODE NUM» 
«SLOT NUM2"1"«/SLOT NUM» 
«/HOST PORT» 


«HOST PORT value-"2"» 
«NODE NUM»2"2"«/NODE NUM» 
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«SLOT МОМ>"1"</510Т NUM» 
«/HOST PORT» 
«HOST PORT value="3"> 


«NODE NUM»"3"«/NODE NUM> 


«SLOT NUM»"1"«/SLOT NUM» 
«/HOST PORT» 
«HOST PORT value="4"> 


«NODE МОМ>"4"</МОрЕ NUM» 

«SLOT NUM»"1"«/SLOT NUM» 
«/HOST PORT» 
</READ BACKPLANE INFO> 
</RIBCL> 


READ_ZONE_TABLE 


The READ_ZONE_TABLE command reads the current host port to bay mapping. This command can be used to read a 
complete map table before modifying a map. 


• The HOST PORT value is the host port used for the bays that follow it. A HOST. PORT value of UNASSIGNI 
denotes any bay that is not assigned to a host port. Unassigned ports are free to be assigned to a host port. 


ГЕ 
о 


• Тһе BAY value is the bay number of the drive bay. 


The HOST. PORT and BAY values cannot exceed the values shown in READ BACKPLANE INFO. 


<RIBCL VERSION="2.23"> 
«LOGIN USER LOGIN-"administrator" PASSWORD="password"> 
<HARD DRIVE ZONE MODE="read"> 


«READ ZONE TABLE/» 
«/HARD DRIVE ZONE» 
</LOGIN> 
</RIBCL> 


READ_ZONE_TABLE parameters 


None. 


READ_ZONE_TABLE runtime errors 


Hard Drive Zone table read failed. 


READ_ZONE_TABLE return messages 


The following response is typical of data returned by the READ_ZONE_TABLE command: 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 
/> 
«READ ZONE TABLE» 
«TYPE ID value="1"/> 
«SEP NODE ID value="0"/> 
«HOST PORT value-"1"/» 
<BAY value-"1"/» 
<BAY value-"2"/» 
<BAY value-"3"/» 
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<BAY value="4"/> 
<BAY value="5"/> 
<BAY value="6"/> 

<HOST_PORT value="2"/> 
<BAY value="7"/> 
<BAY value="8"/> 
<BAY value="9"/> 
<BAY value="10"/> 
<BAY value="11"/> 
<BAY value="12"/> 

<HOST_PORT value="3"/> 
<BAY value="13"/> 
<BAY value="14"/> 
<BAY value="15"/> 
<BAY value="16"/> 
<BAY value="17"/> 
<BAY value="18"/> 

<HOST PORT value="UNASSIGNED"/> 
<BAY value="19"/> 
<BAY value="20"/> 
<BAY value="21"/> 
<BAY value="22"/> 
<BAY value="23"/> 
<BAY value="24"/> 

</READ_ZONE_TABLE> 
</RIBCL> 
WRITE_ZONE_TABLE 


The WRITE_ZONE_TABLE command is used to change the host port to drive bay mapping. 


NOTE: Hewlett Packard Enterprise recommends that you use the READ_BACKPLANE_INFO and READ_ZONE_TABLE 
commands before attempting to change the zoning on the system. READ_ZONE_TABLE returns the current mapping, and 
the output can be used as a template when forming the new zone map. READ_BACKPLANE_INFO also shows the node to 
host port mapping, and the number of bays and host ports. 


You must include the entire map of all bays when using the WRITE ZONE TABLE command. Place unused bays under the 
UNASSIGNED HOST PORT. The system must be power cycled before the new zone mapping is active. 


The iLO user must have Administrative privileges to execute this command. For this command to parse correctly, it must 
appear within an HARD. DRIVE ZONE command block, and the mode value must be set to write. 


The following example maps six drive bays to each of the first three nodes in the chassis, maps five drive bays on the 
fourth node and leaves drive bay 24 unassigned. 


<RIBCL VERSION-"2.23"» 
«LOGIN USER LOGIN-"administrator" PASSWORD-"password"» 
«HARD DRIVE ZONE MODE="write"> 
«WRITE ZONE TABLE» 
«TYPE ID value="1"/> 
«SEP NODE ID value="0"/> 
«HOST PORT value="1"/> 
<ВАҮ value="1"/> 
<ВАҮ value="2"/> 
<ВАҮ value="3"/> 
<ВАҮ value="4"/> 
<ВАҮ value="5"/> 
<ВАҮ value="6"/> 
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«HOST PORT value="2"/> 
<ВАҮ value="7"/> 
<ВАҮ value="8"/> 
<ВАҮ value="9"/> 
<BAY value-"10"/» 
<ВАҮ value="11"/> 
<ВАҮ value="12"/> 
«HOST PORT value="3"/> 
<BAY value-"13"/» 
<ВАҮ value="14"/> 
<BAY value="15"/> 
<BAY value="16"/> 
<BAY value="17"/> 
<BAY value="18"/> 
<HOST_PORT value="4"/> 
<BAY value="19"/> 
<BAY value="20"/> 
<BAY value="21"/> 
<BAY value="22"/> 
<BAY value="23"/> 
<HOST PORT value="UNASSIGNED"/> 
<BAY value="24"/> 
</WRITE_ZONE_TABLE> 
</HARD_DRIVE_ZONE> 
</LOGIN> 
</RIBCL> 


WRITE_ZONE_TABLE parameters 


TYPE_ID—Represents the type of Storage Enclosure Processor (SEP) configuration. The TYPE_ID must be the same as 
the ТҮРЕ ID returned by the READ BACKPLANE INFO command. 


Type ID System Configuration Description 
Value 


1 TYPEI One SEP (with multiple bays) shared across multiple compute nodes. 

2 TYPE Il Multiple SEPs connected to multiple nodes in a 1-to-1 mapping. 

3 TYPE III Multiple SEPs with more than one SEP connected with each other, shared 
across multiple nodes - but no more than опе SEP is directly connected to a 
node. 

4 TYPE IV Similar to TYPE Ill, except that more than one SEP is directly connected to a 
node. 


SEP_NODE_ID—The node ID in which the SEP resides. 


HOST_PORT—The host port to which bays are assigned. Use the READ BACKPLANE INFO command and refer to the 
returned value for HOST. PORT CNT to see the maximum number of host ports. 


BAY—Drive bays. The maximum number cannot exceed the number of chassis drive bays. Use the 
READ. BACKPLANE INFO command and refer to the returned values for BAY CNT, START BAY, and END BAY to 
determine maximum number of drive bays and start and end points. 
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WRITE, ZONE TABLE runtime errors 


User 
this 


Әсег 


Hard 


Hard 


Hard 


Hard 


information is open for read-only access. Write access is required for 


operation 


does NOT have correct privilege for action. ADMIN PRIV required. 


Drive Zone table write failed. 


Drive Zoning not available on this system. 
Drive Zone failed to write information to 


Drive Zone invalid port. 


Backplane controller. 
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Secure Shell 


SSH overview 


SSH is a program for logging into and executing commands on a remote machine, which includes security with 
authentication, encryption, and data integrity features. The iLO firmware can support simultaneous access from five SSH 
clients. After SSH is connected and authenticated, the command line interface is available. 


iLO supports: 
• SSH protocol version 2. 


e PuTTY, a free version of the SSHprotocol, available for download on the Internet. Hewlett Packard Enterprise 
recommends using version 0.54 or later. 


e OpenSSH, which is a free version of the SSH protocol available for download on the Internet. 


When upgrading the firmware, a one-time 25-second delay occurs before SSH functionality is available. During this time, 
iLO generates the 1024-bit DSA keys. These keys are saved by iLO for future use. If iLO is reset to factory defaults, the 
DSA keys are erased and are regenerated on the next boot. 


Supported SSH features 


The library supports only version 2 (SSH-2) of the protocol. Table 40: Supported SSH Features shows the SSH features 
supported by iLO. 


Table 40: Supported SSH Features 


Feature Supported Algorithm 
Server host key algorithms ssh-dsa 

Encryption (same set supported both ways) Sdes-cbc, aes128-cbc 
Hashing algorithms hmac-sha1, hmac-md5 
Public key algorithms ssh-dsa 

Key exchange Diffie-hellman-group1-sha1 
Compression None 

Language English 

Client/User authentication method Password 

Authentication timeout 2 minutes 


Table Continued 
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Feature Supported Algorithm 


Authentication attempts 3 


Default SSH port 22 


Using Secure Shell 


Using SSH 
Procedure 


1. Open an SSH window. 


2. When prompted, enter the IP address or DNS name, login name, and password. 


Using OpenSSH 
To start an OpenSSH client in Linux, use: 
ssh -1 loginname ipaddress/dns name 


Using PuTTY 


e To start a PuTTY session, double-click the PUTTY icon in the directory where PuTTY is installed. 


e То start a PuTTY session from the command line, do the following: 


° Start a connection to a server called host by entering:putty.exe [-ssh | -telnet | -rlogin | - 
raw] [user8]hostputty.exe [-ssh | -rlogin | -raw] [user@]host 


° Start an existing saved session called sessionname by enteringgputty.exe -load session name 


SSH key authorization 


SSH key-based authentication enables SIM to connect to LOM devices through SSH and be authenticated and authorized 
to perform administrative-level tasks. The CLP is utilized to perform tasks. SIM can perform these tasks on multiple LOM 
devices nearly simultaneously, at scheduled times. SIM provides a menu-driven interface to manage and configure 
multiple targets. Enhancements to SIM are provided by tool definition files. 


SIM can perform actions on target devices utilizing an SSH interface that requires private key-based authentication. If SIM 
is enabled to integrate more fully with LOM devices, SSH key-based authentication is implemented in iLO. 


A SIM instance is established as a trusted SSH client by installing the public key in iLO. This is completed either manually 
through a Web-based GUI, or automatically with the mxagentconfig utility. 


SSH keys do not need to be created to use SSH in interactive mode. For information about using SSH in interactive mode, 
see SSH overview. 


Tool definition files 


TDEF files extend the menu system of HPE Systems Insight Manager (SIM) to provide the command line commands that 
SIM transmits to iLO through an SSH connection. 
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Mxagentconfig utility 


Mxagentconfig is a utility used to export and install SIM public SSH keys into other systems. This utility simplifies the 
process and can install the public key on many systems simultaneously. Mxagentconfig makes an SSH connection to 
iLO, authenticates with a user name and password, and transmits the necessary public key. The iLO firmware stores this 
key as a trusted SSH client key. 


Importing SSH keys from PuTTY 


The public key file format generated by PuTTY is not compatible with iLO. The following example illustrates, a PUTTY 
generated public key file: 


---- BEGIN SSH2 PUBLIC KEY ---- 

Comment: "Administrator" 
AAAAB3NzaClyc2EAAAABJOAAAIBOxOwVO9itOBllo-tHnY3VvmsGgwghCyLOVzJl 
3A9F5yzKj-RXJVPxOGusAhmJwF8PBQ9wV5EORumm6gNOaPyvAMJCG/10PW7Fhacl 
VLt8i5F3Lossw-t/LWat6HOdal3TF2vq3ZoYFUTAesC6YbAACM7kLuGwxF5XMNR2E 
Foup3w== 
---- END SSH2 PUBLIC KEY ---- 


Note that this sample key conforms to RFC 4716 (SSH Public Key File Format). The iLO interface supports two key 
formats, OpenSSH 2 and RFC 4716. A third format is supported only in scripting, see IMPORT_SSH_KEY. 


The iLO firmware expects public key file information on a single line. You can use the PUTTY Key Generator utility 
(puttygen.exe) to generate and properly format a key file for import into iLO. 


Procedure 


1. Double-click the PUTTY Key Generator icon to launch the utility. 
2. Select the type of key to generate, either SSH-2 RSA or SSH-2 DSA. 
3. Click Generate. 


On the key area, move the mouse around to generate the key. You must keep moving the mouse until the key 
generation process completes. 


4. Click Save public key and then enter a file name when prompted. 


5. Click Save private key and then enter a file name when prompted. Note that you have the option to enter and 
confirm a Key passphrase. 


6. Open your public key in a text editor, and copy the contents to the clipboard. 
7. Login to iLO Cif not already open). 


8. On the iLO SSH Key Adminstration page, select a user from the Authorized SSH Keys list, and then click Authorize 
New Key. 


A DSA Public Key Import Data box appears. 

9. Paste the PEM encoded DSA public key in the box, and then click Import Public Key. 
A new Public Key Hash appears for the user in the list of authorized SSH keys. 

10. Launch PuTTY. 

11. Select Session, and then configure your iLO IP address. 

12. Select Connection > SSH > Auth. 


13. Click Browse, and then locate the private key file. 
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14. Click Open. 
The iLO firmware prompts for a user name. 
15. Enter the logon name associated with the public key. 


The public key in iLO authenticates with the private key in PuTTY. If the keys match, you are logged in to iLO 
without using a password. 


Keys can be created with a key passphrase. If a key passphrase was used to generate the public key, you are 
prompted for the key passphrase before you log in to iLO. 


Importing SSH keys generated using ssh-keygen 


Procedure 


1. After generating an SSH key using ssh- keygen and creating the key. pub file, perform the following steps: 
2. Locate and open the key. pub file with a text editor. The file begins with the text ssh-dsa. 


3. Save and close the file. 


The key file is ready to import and authorize. 
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PERL scripting 


Using PERL with the XML scripting interface 


The scripting interface provided enables administrators to manage virtually every aspect of the device in an automated 
fashion. Primarily, administrators use tools like HPQLOCFG to assist deployment efforts. Administrators using a non- 
Windows client can use PERL scripts to send XML scripts to the iLO devices. Administrators can also use PERL to perform 
more complex tasks than HPQLOCFG can perform. 


This section discusses how to use PERL scripting in conjunction with the Lights-Out XML scripting language. PERL scripts 
require a valid user ID and password with appropriate privileges. 


Packages containing various and comprehensive sample scripts for Windows and Linux are available for download on the 
Hewlett Packard Enterprise website: http://www.hpe.com/support/ilo4. 


XML enhancements 


If you are using a utility other than HPQLOCFG (such as PERL), the following steps help ensure that the iLO 5 firmware 
returns properly formatted XML. You must incorporate the following tag into the script sent to iLO 5: 


<ҺОСЕС version="2.0"/> 


You can place this tag in either the PERL script or the XML script. Placement of this tag is important. If you place this tag 
in the PERL script, the tag must be sent after <?xml version-"1.0"?» and before the XML script is sent. If you 
place the tag in the XML script, the tag must be placed before <RIBCL version="2.0">. If you are using the 
PERL script provided by Hewlett Packard Enterprise, you can add the bold line in the following example to return properly 
formatted XML syntax. 


For example: 


e PERL script modification 


# Open the SSL connection and the input file 

my Sclient = new 10::Socket::SSL->new(PeerAddr => $host); 

open (Е, "<Sfile") || die "Can't open S$file\n"; 

# Send the XML header and begin processing the file 

print Sclient '«?xml version="1.0"?>' . "\r\n"; 

#Send tag to iLO firmware to insure properly formatted XML is returned. 
print $client '<LOCFG version="2.0"/>' . "\r\n"; 


e XML script modification 


<!-- The bold line could be added for the return of properly 
formatted XML. --> 

<LOCFG version="2.0"/> 

<RIBCL version="2.0"> 


«LOGIN USER LOGIN-"Adminname" PASSWORD = "password"> 
<!--Add XML script here--> 

</LOGIN> 

</RIBCL> 
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Opening ап SSL connection 


Perl scripts must open an SSL connection to the device HTTPS port, by default port 443. 


For example: 


use Socket; 

use Net::SSLeay qw(die now die if ssl error); 
Net::SSLeay::load error strings(); 
Net::SSLeay::SSLeay add ssl algorithms (); 
Net::SSLeay::randomize(); 


# opens an ssl connection to port 443 of the passed host 


ғ 

sub openSSLconnection($) 

{ 

my Shost = shift; 

my (Sctx, 5551, $sin, Sip, Snip); 

if (not бір = inet aton(S$host)) 

{ 

print "$host is a DNS Name, performing lookup\n" if S$debug; 

Sip = gethostbyname(Shost) or die "ERROR: Host Shostname not found.\n"; 

} 

Snip = inet ntoa($ip); 

print STDERR "Connecting to $nip:443^n"; 

$sin - sockaddr in(443, бір); 

Socket (S, &AF INET, &SOCK STREAM, 0) or die "ERROR: socket: $!"; 

connect (S, Ssin) or die "connect: $!"; 

$ctx = Net::SSLeay::CTX new() or die now("ERROR: Failed to create SSL CTX $! "); 
Net::SSLeay::CTX set options($ctx, &Net::SSLeay::OP ALL); 

die if ssl error("ERROR: ssl ctx set options"); 
$ssl - Net::SSLeay::new($ctx) or die now("ERROR: Failed to create SSL $!"); 
Net::SSLeay::set fd($ssl, fileno(S)); 

Net::SSLeay::connect($ssl) and die if ssl error("ERROR: ssl connect"); 
print STDERR 'SSL Connected '; 

print 'Using Cipher: ' . Net::SSLeay::get cipher($ssl) if $debug; 

print STDERR "Ann"; 


return 5551; 


} 


Sending the XML header and script body 


After the connection is established, the first line of script sent must be an XML document header, which tells the device 
HTTPS web server that the following content is an XML script. The header must match the header used in the example 
exactly. After the header has been completely sent, the remainder of the script can be sent. In this example, the script is 
sent all at once. 


For example: 


# usage: sendscript (host, script) 
# sends the xmlscript script to host, returns reply 
sub sendscript ($$) 
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( 

my Shost = shift; 

my Sscript = shift; 

my (5551, Sreply, Slastreply, $res, $n); 
Sssl = openSSLconnection ($host); 


# write header 

$n = Net::SSLeay::ssl write а11 ($551, '«?xml version="1.0"?>'."\r\n"); 
print "Wrote $n\n" if S$debug; 

# write script 


$n = Net::SSLeay::ssl write all($ssl, $script); 
print "Wrote $n\nSscript\n" if Sdebug; 

Sreply = ""; 

Slastreply = ""; 

READLOOP: 

while (1) 

{ 

$п++; 

Sreply .- Slastreply; 

Slastreply = Net::SSLeay::read($ssl); 

die if ssl error("ERROR: ssl read"); 
if(Slastreply eq "") 

( 
sleep(2); # wait 2 sec for more text. 
Slastreply = Net::SSLeay::read($ssl); 
last READLOOP if (S$lastreply eq ""); 

} 
sleep(2); # wait 2 sec for more text. 
Slastreply = Net::SSLeay::read($ssl); 
last READLOOP if (S$lastreply eq ""); 

} 
print "READ: Slastreply\n" if S$debug; 

if (Slastreply =~ m/STATUS=" (Ох [0-9A-F]+)"[\s]+MESSAGE=' (. *) 
"{\s]+\/>[\s]* (CCENS] | .) *?)<\/RIBCL>/) 

( 

1Ғ(51 eq "0x0000") 

( 

print STDERR "S$3\n" if $3; 

} 
else 
print STDERR "ERROR: STATUS: $1, MESSAGE: $2\n"; 
{ 


} 

} 

} 

Sreply .= Slastreply; 
closeSSLconnection($ssl); 
return Sreply; 


) 


PERL scripts сап also send а portion of the XML script, wait for the reply, and send more XML later. Using this technique, 
it is possible to use the reply produced by an earlier command as input to a later command. However, the PERL script 
must send data within a few seconds or the device times out and disconnects. 


When using the XML scripting interface with PERL scripts, the following restrictions apply: 
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Procedure 


1. PERL scripts must send the XML header before sending the body of the script. 


2. PERL scripts must provide script data fast enough to prevent the device from timing out. 
3. Only one XML document is allowed per connection, which means one pair of RIBCL tags. 


4. The device does not accept additional XML tags after a syntax error occurs. To send additional XML, a new connection 
must be established. 
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iLO ports 


Enabling the Shared Network Port feature through XML scripting 


For information on how to use the SHARED NETWORK PORT command to enable the iLO 5 Shared Network Port 
through XML scripting, see RIBCL XML Scripting Language. 


The following sample script configures the iLO to select the Shared Network Port. You can customize this script to your 
needs. All non-blade platforms support some variation of this script. Use LOM or FlexibleLOM for the 

SHARED NETWORK, PORT VALUE. If you pick a value that your platform does not support, the script generates an error 
when it is run. 


<RIBCL version="2.0"> 

<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<КІВ INFO MODE="WRITE"> 

«MOD NETWORK SETTINGS» 


<!-- Desired NIC: Substitute: --> 

<!-- iLO МІС «SHARED NETWORK PORT VALUE-"N"/» --> 

«!-- Embedded Host NIC «SHARED NETWORK PORT VALUE="LOM"/> --> 

«!-- Optional Host NIC «SHARED NETWORK PORT VALUE-"FlexibleLOM"/» --> 
«SHARED NETWORK PORT VALUE-"Y" /> 


«/MOD NETWORK SETTINGS» 
«/RIB INFO» 

</LOGIN> 

</RIBCL> 


Re-enabling the dedicated NIC management port 


You can re-enable the iLO-dedicated NIC management port using the User Interface, RBSU, CLP, or XML scripting. 


For information about how to use the SHARED NETWORK PORT command, see RIBCL XML Scripting Language 


To re-enable the dedicated management port using RBSU: 
Procedure 


1. Connect the dedicated NIC management port to a LAN from which the server is managed. 

2. Reboot the server. 

3. When prompted during POST, press the F9 key to enter System Utilities. 

4. Navigate to System Utilities > System Configuration > iLO 5 Configuration Utility > Network options. 
5. Change the Network Interface Adapter to On. 


There are two other available choices, depending on the whether you have the add-on adapter installed. Use LOM for 
an embedded NIC, and use Flex LOM for the add-on adapter. The shared network port is not supported on HPE Blade 
or Synergy беп10 servers. 


6. Press the F10 key to save the configuration. 


7. Press one of the following keys to complete the procedure: 
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e F7 — Load Defaults 
e F10 — Save 


• F12 — Save and Exit 


After iLO resets, the dedicated NIC management port is active. 


To re-enable the dedicated iLO port using XML, use the following sample RIBCL script. The sample script configures iLO 
to select the iLO Network Port. You can modify the script for your specific needs. Using this script on platforms that do 
not support the Shared Network Port causes an error. 


For example: 


<RIBCL version="2.0"> 
<LOGIN USER LOGIN-"adminname" PASSWORD="password"> 
<RIB INFO MODE="WRITE"> 

«MOD NETWORK SETTINGS» 

«SHARED NETWORK PORT VALUE-"N" /> 

«/MOD NETWORK 5ЕТТІМС5> 
«/RIB INFO» 
</LOGIN> 
</RIBCL> 


т 
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Sample script and command reference 


The HP Lights-Out XML Scripting Sample bundle contains sample scripts that you can modify as needed for use in your 
environment. The table below lists all the available sample scripts and the related command for each. 


Table 41: Sample scripts and related commands 


Sample script 


Abort. Directory. test.xml 
Add Federation, Group.xml 
add 550 rec.xml 

Add User.xml 
Administrator reset pw.xml 
Cert Request.xml 

Change Password.xml 
Clear AHS  Data.xml 

Clear EventLog.xml 

Clear. IML.xml 

Clear. Power. Оп, Time.xml 
Computer. Lock Config.xml 
Delete Federation, Group.xml 
Delete SSH Key.xml 
delete sso rec.xml 

Delete User.xml 

Eject. Virtual. Media.xml 
ERS AHS Submit.xml 


ERS. DC CompleteRegistration.xml 


С] 


Related Command 


ABORT DIR TEST 


ADD. FEDERATION, GROUP 


SSO SERVER 


ADD. USER 


MOD. USER 


CERTIFICATE SIGNING, REQUEST 


MOD USER 


АН5 CLEAR DATA 


CLEAR EVENTLOG 


CLEAR IML 


CLEAR SERVER POWER ON. TIME 


COMPUTER LOCK CONFIG 


DELETE FEDERATION, GROUP 


MOD. USER 


DELETE SERVER 


DELETE USER 


EJECT. VIRTUAL MEDIA DEVICE 


TRIGGER, BB DATA 


DC, REGISTRATION, COMPLETE 


Table Continued 
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ЕК5 DC RegisterDevice.xml 


ERS. DC SetWebProxy.xml 


ERS Disable.xml 


ERS Get Settings.xml 


ERS IRS Enable.xml 


ERS L2 Collection Submit.xml 


ERS Test Event Submit.xml 


Factory. Defaults.xml 


Get AHS Status.xml 


Get All Languages.xml 


Get All Licenses.xml 


Get. АШ Users.xml 


Get АШ User Info.xml 


Get Asset Tag.xml 


Get Boot Mode.xml 


Get Current Boot Mode.xml 


Get Directory.xml 


Get Directory Test Results 


Get Embedded Health.xml 


Get EmHealth.xml 


Get Encrypt.xml 


Get Federation All, Groups.xml 


Get Federation АІ Groups Info.xml 


SET ERS DIRECT. CONNECT 


SET ЕК5 WEB PROXY 


DISABLE ERS 


GET ERS SETTINGS 


SET ERS IRS, CONNECT 


TRIGGER L2, COLLECTION 


TRIGGER TEST EVENT 


FACTORY DEFAULTS 


GET AHS STATUS 


GET. ALL LANGUAGES 


GET ALL, LICENSES 


GET. ALL, USERS 


GET ALL, USER INFO 


GET ASSET TAG 


GET. PENDING. ВООТ MODE 


GET. CURRENT. BOOT MODE 


GET. DIR CONFIG 


СЕТ DIR TEST. RESULTS 


GET. EMBEDDED HEALTH 


GET EMBEDDED HEALTH 


GET. ENCRYPT SETTINGS 


GET. FEDERATION. ALL GROUPS 


GET. FEDERATION, ALL. GROUPS INFO 


Table Continued 
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Get Federation, Group.xml 


Get Federation Multicast Options.xml 


Get FIPS Status.xml 


Get FW Version.xml 


Get Global.xml 


Get Host APO.xml 


Get Host Data.xml 


Get Host Power.xml 


Get Host Power. Saver.xml 


Get Host Pwr Micro Ver.xml 


Get Hotkey Config.xml 


Get iLO Log.xml 


Get IML.xml 


Get language.xml 


Get Network.xml 


Get OA Info.xml 


Get One Time Boot Order.xml 


Get Persistent Boot Order.xml 


Get Persmouse Status.xml 


Get PowerCap.xml 


Get Power On Time.xml 


Get Power. Readings.xml 


Get Product Name.xml 


GET. FEDERATION, GROUP 


GET. FEDERATION, MULTICAST 


GET FIPS STATUS 


GET. FW. VERSION 


СЕТ GLOBAL SETTINGS 


GET. SERVER AUTO PWR 


GET. HOST DATA 


GET. HOST POWER STATUS 


GET. HOST. POWER SAVER STATUS 


СЕТ HOST PWR MICRO VER 


GET. HOTKEY , CONFIG 


GET EVENT. LOG 


GET EVENT. LOG 


GET LANGUAGE 


GET. NETWORK SETTINGS 


GET. OA INFO 


GET ONE TIME BOOT 


GET. PERSISTENT BOOT 


GET. PERS. MOUSE KEYBOARD ENABLED 


GET. POWER CAP 


GET. SERVER POWER ON TIME 


GET. POWER READINGS 


СЕТ PRODUCT NAME 
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Get Pwreg. Alert Threshold.xml 


Get Rack Settings.xml 


Get SDCard Status.xml 


Get Security Msg.xml 


Get Server FQDN.xml 


Get Server Name.xml 


Get SNMP IM.xml 


Get SSO Settings.xml 


Get Supported Boot Mode.xml 


Get TPM Status.xml 


Get UID. Status.xml 


Get User.xml 


Get УМ Status.xml 


hd zone defaults.xml 


HD. zone ReadBackplanelnfo.xml 


hd zone readzonetable.xml 


hd zone write, zone.xml 


Hotkey_Config.xml 


Import_Cert.xml 


Import_SSH_Key.xml 


Insert_Virtual_Media.xml 


License.xml 


Lock Configuration.xml 


GET. PWREG 


GET. RACK SETTINGS 


GET SDCARD. STATUS 


СЕТ SECURITY MSG 


GET. SERVER FQDN and GET 5МН. FQDN 


GET. SERVER NAME 


GET. SNMP. ІМ SETTINGS 


GET. SSO SETTINGS 


СЕТ SUPPORTED. BOOT MODE 


GET. TPM STATUS 


СЕТ UID STATUS 


GET USER 


GET. VM. STATUS 


ZONE FACTORY DEFAULTS 


READ. BACKPLANE INFO 


READ. ZONE TABLE 


WRITE ZONE TABLE 


HOTKEY CONFIG 


IMPORT. CERTIFICATE 


IMPORT. SSH KEY 


INSERT. VIRTUAL MEDIA 


LICENSE 


MOD. GLOBAL SETTINGS 
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Mod Directory.xml 


Mod Епсгурі Settings.xml 


Mod Federation Group.xml 


Моа Global Settings.xml 


Mod Kerberos Config.xml 


Mod Network Settings.xml 


Mod Schemaless, Directory.xml 


Mod SNMP IM. Settings.xml 


Mod, 550 Settings.xml 


Mod User.xml 


Mod, VLAN.xml 


Mod VM Port Settings.xml 


Profile Apply.xml 


Profile Apply Get Results.xml 


Profile Desc Delete.xml 


Profile Desc Download.xml 


Profile Desc List.xml 


RBSU, POST ІР.хті 


Reset. RIB.xml 


Reset Server.xml 


Send Snmp, Test Trap.xml 


Set AHS Status.xml 


Set Asset tag.xml 


MOD DIR CONFIG 


MOD. ENCRYPT SETTINGS 


MOD. FEDERATION, GROUP 


MOD. GLOBAL SETTINGS 


MOD DIR CONFIG 


MOD. NETWORK SETTINGS 


MOD. DIR CONFIG 


MOD. SNMP. IM, SETTINGS 


MOD. SSO SETTINGS 


MOD. USER 


MOD. NETWORK SETTINGS 


MOD. GLOBAL SETTINGS 


PROFILE APPLY 


PROFILE APPLY GET. RESULTS 


PROFILE DELETE 


PROFILE DESC DOWNLOAD 


PROFILE LIST 


MOD. GLOBAL SETTINGS 


RESET RIB 


RESET. SERVER 


SEND SNMP TEST TRAP 


SET AHS STATUS 


SET ASSET TAG 
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Set Boot Mode.xml 


Set Brownout.xml 


Set Federation Multicast Options.xml 


Set FIPS Enable.xml 


Set Host APO.xml 


Set Host Power.xml 


Set Host Power. Saver.xml 


Set Language.xml 


Set One Time Boot Order.xml 


Set Persistent Boot Order.xml 


Set Persmouse Status.xml 


Set PowerCap.xml 


Set Pwreg. Alert Threshold.xml 


Set Security Msg.xml 


Set Server. FQDN.xml 


Set Server Name.xml 


Set Virtual Power BTN.xml 


Set VM Status.xml 


Shared Network Port.xml 


Start Directory. test.xml 


SET PENDING, BOOT. MODE 


MOD. GLOBAL SETTINGS 


SET FEDERATION, MULTICAST 


FIPS ENABLE 


SERVER AUTO PWR 


SET HOST POWER 


SET HOST POWER SAVER 


SET LANGUAGE 


SET ONE TIME BOOT 


SET PERSISTENT BOOT 


SET PERS MOUSE KEYBOARD. ENABLED 


SET POWER CAP 


SET PWREG 


SET. SECURITY, MSG 


SERVER FQDN 


SMH_FQDN 


SERVER_NAME 


PRESS_PWR_BTN 
COLD_BOOT_SERVER 
WARM_BOOT_SERVER 


HOLD_PWR_BTN 


SET_VM_STATUS 


MOD_NETWORK_SETTINGS 


START_DIR_TEST 
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UID. Control.xml UID. CONTROL 


Update Firmware.xml UPDATE RIB. FIRMWARE 


Update Language.xml UPDATE LANG PACK 
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Sample return for GET EMBEDDED HEALTH 


A possible GET EMBEDDED HEALTH return message is: 


«GET EMBEDDED HEALTH DATA» 


«FANS» 
«FAN» 
«ZONE VALUE - "System"/» 
«LABEL VALUE = "Fan 1"/> 
«STATUS VALUE - "OK"/» 
«SPEED VALUE - "9" UNIT-"Percentage"/» 
</ҒАМ> 
<ҒАМ> 
«ZONE VALUE - "System"/» 
«LABEL VALUE = "Fan 2"/> 
«STATUS VALUE = "OK"/> 
«SPEED VALUE = "12" UNIT="Percentage"/> 
</ҒАМ> 
<ҒАМ> 
«ZONE VALUE - "System"/» 
«LABEL VALUE = "Fan 3"/> 
«STATUS VALUE - "ОК"/> 
«SPEED VALUE = "11" UNIT="Percentage"/> 
</ҒАМ> 
<ҒАМ> 
«ZONE VALUE - "System"/» 
«LABEL VALUE = "Fan 4"/> 
«STATUS VALUE = "OK"/> 
«SPEED VALUE = "11" UNIT="Percentage"/> 
</ҒАМ> 
<ҒАМ> 
«ZONE VALUE - "System"/» 
«LABEL VALUE = "Fan 5"/> 
«STATUS VALUE = "OK"/> 
«SPEED VALUE = "11" UNIT="Percentage"/> 
</ҒАМ> 
<ҒАМ> 
«ZONE VALUE - "System"/» 
«LABEL VALUE = "Fan 6"/> 
«STATUS VALUE - "OK"/» 
«SPEED VALUE - "9" UNIT-"Percentage"/» 
</ҒАМ> 
</ҒАМ5> 
«TEMPERATURE» 
«TEMP» 
«LABEL VALUE = "01-Inlet Ambient"/> 
<LOCATION VALUE = "Ambient"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "21" UNIT="Celsius"/> 
<CAUTION VALUE = "42" UNIT="Celsius"/> 
<CRITICAL VALUE = "50" UNIT="Celsius"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "02-CPU 1"/> 
<LOCATION VALUE = "CPU"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "40" UNIT="Celsius"/> 
<CAUTION VALUE = "70" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "03-CPU 2"/> 
<LOCATION VALUE = "CPU"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "40" UNIT="Celsius"/> 
<CAUTION VALUE = "70" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "04-P1 DIMM 1-6"/> 
<LOCATION VALUE = "Memory"/> 
<STATUS VALUE = "Not Installed"/> 
<CURRENTREADING VALUE = "N/A"/> 
<CAUTION VALUE = "N/A"/> 
<CRITICAL VALUE = "N/A"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "05-P1 DIMM 7-12"/> 


Sample return for GET EMBEDDED HEALTH 
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<ҺОСАТІО 
«STATUS 
«CURRENT 
«CAUTION 
«CRITICA 
</ТЕМР> 
<ТЕМР> 
XLABEL V. 
«LOCATIO 
«STATUS 
«CURRENT 
«CAUTION 
«CRITICA 
«/TEMP» 
«TEMP» 
XLABEL V. 
<LOCATIO 
«STATUS 
«CURRENT 
<CAUTION 
<CRITICA 
</TEMP> 
<TEMP> 
<LABEL У. 
<LOCATIO 
«STATUS 
«CURRENT 
«CAUTION 
«CRITICA 
</ТЕМР> 
<ТЕМР> 
«LABEL V. 
<LOCATIO 
<STATUS 
<CURRENT 
<CAUTION 
<CRITICA 
</TEMP> 
<TEMP> 
<LABEL V. 
<LOCATIO 
«STATUS 
«CURRENT 
«CAUTION 
<СКІТІСА 
</ТЕМР> 
<ТЕМР> 
XLABEL V. 
<LOCATIO 
«STATUS 
«CURRENT 
«CAUTION 
«CRITICA 
«/TEMP» 
«TEMP» 
«LABEL V. 
<ҺОСАТІО 
«STATUS 
«CURRENT 
<САОТТОМ 
«CRITICA 
</ТЕМР> 
<ТЕМР> 
«LABEL V. 
<LOCATIO 
<STATUS 
<CURRENT 
<CAUTION 
<CRITICA 
</TEMP> 
<TEMP> 
<LABEL V. 
<LOCATIO 
«STATUS 
<СОККЕМТ 
«CAUTION 
<СКІТІСА 
</ТЕМР> 
<ТЕМР> 
XLABEL V. 
<LOCATIO 


N VALUE = "Memory"/> 
VALUE = "OK"/> 
READING VALUE = "30" UNIT="Celsius"/> 
VALUE = "89" UNIT="Celsius"/> 
L VALUE = "N/A"/> 
ALUE = "06-P2 DIMM 1-6"/> 
VALUE = "Memory"/> 
VALUE = "Not Installed"/> 
READING VALUE = "N/A"/> 
VALUE = "N/A"/> 
L VALUE = "N/A"/> 
ALUE = "07-P2 DIMM 7-12"/> 
VALUE = "Memory"/> 
VALUE = "OK"/> 
READING VALUE = "28" UNIT="Celsius"/> 
VALUE = "89" UNIT="Celsius"/> 
L VALUE = "N/A"/> 
ALUE = "08-HD Мах"/> 
N VALUE = "System"/> 
VALUE = "OK"/> 
READING VALUE = "35" UNIT="Celsius"/> 
VALUE = "60" UNIT="Celsius"/> 
L VALUE = "N/A"/> 
ALUE = "09-Ехр Bay Drive"/> 
N VALUE = "System"/> 
VALUE = "Not Installed"/> 
READING VALUE = "N/A"/> 
VALUE = "N/A"/> 
L VALUE = "N/A"/> 
ALUE = "10-Chipset"/> 
VALUE = "System"/> 
VALUE = "OK"/> 
READING VALUE = "44" UNIT="Celsius"/> 
VALUE = "105" UNIT="Celsius"/> 
L VALUE = "N/A"/> 
ALUE = "11-PS 1 Inlet"/> 
VALUE = "Power Supply"/> 
VALUE = "OK"/> 
READING VALUE = "31" UNIT="Celsius"/> 
VALUE = "N/A"/> 
L VALUE = "N/A"/> 
ALUE = "12-PS 2 Inlet"/> 
N VALUE = "Power Supply"/> 
VALUE = "Not Installed"/> 
READING VALUE = "N/A"/> 
VALUE = "N/A"/> 
L VALUE = "N/A"/> 
ALUE = "13-VR Р1"/> 
N VALUE = "System"/> 
VALUE = "OK"/> 
READING VALUE = "38" UNIT="Celsius"/> 
VALUE = "115" UNIT="Celsius"/> 
L VALUE = "120" UNIT="Celsius"/> 
ALUE = "14-VR P2"/> 
VALUE = "System"/> 
VALUE = "OK"/> 
READING VALUE = "35" UNIT="Celsius"/> 
VALUE = "115" UNIT="Celsius"/> 
L VALUE = "120" UNIT="Celsius"/> 
ALUE = "15-VR P1 Mem"/> 
VALUE = "System"/> 
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«STATUS VALUE - 


<CURRENTREAD 
<CAUTION VALU: 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU: 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 


"OK" /> 


NG VALUE = "33" UNIT="Celsius"/> 
E = "115" UNIT="Celsius"/> 
UE = "120" UNIT="Celsius"/> 


= "16-VR P1 Mem"/> 


UE = "System"/> 

= "OK"/> 

NG VALUE = "33" UNIT="Celsius"/> 
E = "115" UNIT="Celsius"/> 


UE = "120" UNIT="Celsius"/> 


= "17-VR P2 Mem"/> 


<LOCATION VALUE = "System"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "33" UNIT="Celsius"/> 
<CAUTION VALUE = "115" UNIT="Celsius"/> 
<CRITICAL VALUE = "120" UNIT="Celsius"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "18-VR Р2 Mem"/> 
<LOCATION VALUE = "System"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "32" UNIT="Celsius"/> 
<CAUTION VALUE = "115" UNIT="Celsius"/> 
<CRITICAL VALUE = "120" UNIT="Celsius"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "19-PS 1 Internal"/> 
<LOCATION VALUE = "Power Supply"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "40" UNIT="Celsius"/> 
<CAUTION VALUE = "N/A"/> 
<CRITICAL VALUE = "N/A"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "20-PS 2 Internal"/> 
<LOCATION VALUE = "Power Supply"/> 
<STATUS VALUE = "Not Installed"/> 
<CURRENTREADING VALUE = "N/A"/> 
<CAUTION VALUE = "N/A"/> 
<CRITICAL VALUE = "N/A"/> 
</TEMP> 
<TEMP> 


<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU: 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU: 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 


= "2]-PCI 1"/» 
UE - "I/O Board"/» 
- "Not Installed"/» 


NG VALUE - "N/A"/» 

E = "N/A"/» 

UE - "N/A"/» 

= "22-PCI 2"/» 

UE - "I/O Воага"/> 

- "Not Installed"/» 
NG VALUE - "N/A"/» 

E = "N/A"/» 

UE - "N/A"/» 

- "23-PCI 3"/» 

UE - "I/O Board"/» 

= "Not Installed"/» 
NG VALUE - "N/A"/» 


E = "N/A"/» 
UE 2 "N/A"/» 


= "24-PCI 4"/> 

UE = "I/O Board"/» 

= "Not Installed"/» 
NG VALUE = "N/A"/» 

E = "N/A"/» 

UE - "N/A"/» 


= "25-PCI 5"/» 
UE - "I/O Board"/» 
- "Not Installed"/» 
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<CURRENTREADING VALUE = "N/A"/» 
<CAUTION VALUE = "N/A"/> 
<CRITICAL VALUE = "N/A"/> 

</TEMP> 

<TEMP> 
<LABEL VALUE = "26-PCI 6"/> 
<LOCATION VALUE = "I/O Board"/> 
<STATUS VALUE = "Not Installed"/> 
<CURRENTREADING VALUE = "N/A"/> 
<CAUTION VALUE = "N/A"/> 
<CRITICAL VALUE = "N/A"/> 

</TEMP> 

<TEMP> 
<LABEL VALUE = "27-HD Controller"/> 
<LOCATION VALUE = "I/O Board"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "65" UNIT="Celsius"/> 
<CAUTION VALUE = "100" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 

</TEMP> 

<TEMP> 


<LABEL VALUE 


<LOCATION VALUE = 


= "28-LOM Card"/> 
"I/O Board"/> 


<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "40" UNIT="Celsius"/> 
<CAUTION VALUE = "100" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 

</TEMP> 

<TEMP> 
<LABEL VALUE = "29-LOM"/> 
<LOCATION VALUE = "System"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "40" UNIT="Celsius"/> 
<CAUTION VALUE = "100" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 

</TEMP> 

<TEMP> 
<LABEL VALUE = "30-Front Ambient"/> 
<LOCATION VALUE = "Ambient"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "29" UNIT="Celsius"/> 
<CAUTION VALUE = "65" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 

</TEMP> 

<TEMP> 


<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU: 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU 
<CRITICAL VAL 
</TEMP> 
<TEMP> 


<LABEL VALUE = 


<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU. 
<CRITICAL VAL 
</TEMP> 
<TEMP> 


<LABEL VALUE = 


<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 
<CAUTION VALU 
<CRITICAL VAL 
</TEMP> 
<TEMP> 
<LABEL VALUE 
<LOCATION VAL 
<STATUS VALUE 
<CURRENTREAD 


= "31-PCI 1 Zone."/> 


UE = "I/O Board"/> 

= "OK"/> 

NG VALUE = "30" UNIT="Celsius"/> 
E = "70" UNIT-"Celsius"/» 


UE = "75" UNIT="Celsius"/> 


= "32-PCI 2 Zone."/» 


UE = "I/O Board"/> 

= "OK"/> 

NG VALUE = "31" UNIT="Celsius"/> 
E = "70" UNIT="Celsius"/> 

UE = "75" UNIT="Celsius"/> 


"33-PCI 3 Zone."/> 


UE = "I/O Board"/> 

= "OK"/> 

NG VALUE = "32" UNIT="Celsius"/> 
E = "70" UNIT="Celsius"/> 

UE = "75" UNIT="Celsius"/> 


"34-PCI 4 Zone"/> 


UE = "I/O Board"/> 

= "Not Installed"/> 
NG VALUE = "N/A"/> 

E = "N/A"/» 

UE - "N/A"/» 


= "35-PCI 5 Zone"/» 
UE = "I/O Board"/» 
= "Not Installed"/» 
NG VALUE - "N/A"/» 
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«CAUTION VALUE = "N/A"/» 


XCRITICAL VALUE 
</ТЕМР> 
<ТЕМР> 

<LABEL VALUE = 

<LOCATION VALUE 
<STATUS VALUE = 


= "N/A"/> 


"36-PCI 6 Zone"/> 
= "I/O Board"/> 
"Not Installed"/> 


<CURRENTREADING VALUE = "N/A"/> 
<CAUTION VALUE = "N/A"/> 
<CRITICAL VALUE = "N/A"/> 
</TEMP> 
<TEMP> 


<LABEL VALUE = 
<LOCATION VALUE 


"37-HD Cntlr Zone"/> 
= "I/O Board"/> 


<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "47" UNIT="Celsius"/> 
<CAUTION VALUE = "75" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 

</TEMP> 

<TEMP> 


<LABEL VALUE = 
<LOCATION VALUE 
<STATUS VALUE = 
<CURRENTREADING 


<CAUTION VALUE = 
<CRITICAL VALUE = 


</TEMP> 
<TEMP> 
<LABEL VALUE = 
<LOCATION VALUE 
<STATUS VALUE = 
<CURRENTREADING 


<CAUTION VALUE = 


<CRITICAL VALUE 
</TEMP> 
<TEMP> 
<LABEL VALUE = 


"38-I/O Zone"/> 


= "System"/> 
"ок" /> 
VALUE - "36" UNIT-"Celsius"/» 


"75" UNIT-"Celsius"/» 
"80" UNIT-"Celsius"/» 


"39-P/S 2 Zone"/» 


= "System"/» 

"OR" /> 

VALUE - "33" UNIT-"Celsius"/» 
"70" UNIT-"Celsius"/» 

= "N/A"/» 


"40-Battery Zone"/» 


«LOCATION VALUE = "System"/» 
«STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "34" UNIT="Celsius"/> 
<CAUTION VALUE = "75" UNIT="Celsius"/> 
<CRITICAL VALUE = "80" UNIT="Celsius"/> 
</TEMP> 
<TEMP> 
<LABEL VALUE = "41-iLO Zone"/> 
<LOCATION VALUE = "System"/> 
<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "37" UNIT="Celsius"/> 
<CAUTION VALUE = "90" UNIT="Celsius"/> 
<CRITICAL VALUE = "95" UNIT="Celsius"/> 
</TEMP> 
<TEMP> 


<LABEL VALUE = 
<LOCATION VALUE 
<STATUS VALUE = 
<CURRENTREADING 


<CAUTION VALUE = 


<CRITICAL VALUE 
</TEMP> 
<TEMP> 
<LABEL VALUE = 
<LOCATION VALUE 
<STATUS VALUE = 
<CURRENTREADING 


<CAUTION VALUE = 


<CRITICAL VALUE 
</TEMP> 
<TEMP> 
<LABEL VALUE = 
<LOCATION VALUE 


"42-Rear HD Max"/> 

= "System"/> 

"Not Installed"/> 

VALUE = "N/A"/> 
"N/A" /> 

= "N/A"/> 


"43-Storage Batt"/> 


= "System"/> 

"OK" /> 

VALUE = "25" UNIT="Celsius"/> 
"60" UNIT="Celsius"/> 

= "N/A"/> 


"44-Fuse"/> 
= "Power Supply"/> 


<STATUS VALUE = "OK"/> 
<CURRENTREADING VALUE = "31" UNIT="Celsius"/> 
<CAUTION VALUE = "100" UNIT="Celsius"/> 
<CRITICAL VALUE = "N/A"/> 
</TEMP> 
</TEMPERATURE> 


<POWER_SUPPLIES> 


«POWER SUPPLY SUMMARY» 


«PRESENT POWER READING VALUE - "83 Watts"/» 
«POWER MANAGEMENT CONTROLLER FIRMWARE VERSION VALUE - "1.0.9"/» 
«POWER SYSTEM REDUNDANCY VALUE - "Not Redundant"/» 
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«HP POWER DISCOVERY SERVICES REDUNDANCY STATUS VALUE - "N/A"/» 


«HIGH EFFICIENCY MODE VALUE = "Balanced"/» 
«/POWER SUPPLY SUMMARY» 
«SUPPLY» 
XLABEL VALUE = "Power Supply 1"/> 
«PRESENT VALUE - "Yes"/» 
«STATUS VALUE = "Good, In Use"/» 
<PDS VALUE = "No"/> 
<HOTPLUG_CAPABLE VALUE = "Yes"/> 
<MODEL VALUE = "720478-B21"/> 
<SPARE VALUE = "754377-001"/> 
<SERIAL NUMBER VALUE = "5DMVV0A4D72048"/» 
<CAPACITY VALUE = "500 Watts"/> 
<FIRMWARE VERSION VALUE = "1.00"/> 
</SUPPLY> 
<SUPPLY> 
<LABEL VALUE = "Power Supply 2"/> 
<PRESENT VALUE = "No"/> 
<STATUS VALUE = "Unknown"/> 
<PDS VALUE = "Other"/> 
<HOTPLUG_CAPABLE VALUE = "Yes"/> 
<MODEL VALUE = "N/A"/> 
<SPARE VALUE = "N/A"/> 
<SERIAL NUMBER VALUE = "N/A"/> 
<CAPACITY VALUE = "N/A"/> 
<FIRMWARE VERSION VALUE = "N/A"/> 
</SUPPLY> 
«POWER DISCOVERY SERVICES IPDU SUMMARY» 
<IPDU> 
<BAY VALUE = "2"/> 
<STATUS VALUE = "iPDU Not Redundant"/> 
«PART NUMBER VALUE = "AF522A"/> 
«SERIAL NUMBER VALUE = "2CJ0221672"/» 
«MAC ADDRESS VALUE = "d8:d3:85:6d:36:9c"/> 
XIPDU LINK VALUE = "http://16.85.177.189"/» 
</IPDU> 


</POWER_DISCOVERY_SERVICES IPDU SUMMARY» 
«SMART STORAGE BATTERY» 


«LABEL VALUE = "Battery 1"/> 

«PRESENT VALUE - "Yes"/» 

«STATUS VALUE = "OK"/> 

<MODEL VALUE = "727258-B21"/> 

<SPARE VALUE = "750450-001"/> 

<SERIAL NUMBER VALUE = "6EMYCOAWY7X770"/> 
<CAPACITY VALUE = "96 Watts"/> 

<FIRMWARE VERSION VALUE = "1.1"/> 


«/SMART STORAGE BATTERY» 
«/POWER SUPPLIES» 


<VRM> 
</VRM> 
<PROCESSORS> 
<PROCESSOR> 
<LABEL VALUE = "Proc 1"/> 
«NAME VALUE = "Intel(R) Xeon(R) CPU E5-2623 v3 8 3.00GHz"/> 
«STATUS VALUE - "ОК"/> 
«SPEED VALUE - "3000 MHz"/» 
<EXECUTION TECHNOLOGY VALUE = "4/4 cores; 8 threads"/» 
«MEMORY TECHNOLOGY VALUE = "64-bit Capable"/» 
XINTERNAL L1 CACHE VALUE - "256 KB"/» 
XINTERNAL L2 CACHE VALUE = "1024 KB"/» 
XINTERNAL L3 CACHE VALUE - "10240 KB"/» 
</PROCESSOR> 
<PROCESSOR> 
<LABEL VALUE = "Proc 2"/> 
<NAME VALUE = "Intel(R) Xeon(R) CPU E5-2623 v3 @ 3.00GHz"/> 
<STATUS VALUE = "OK"/> 
<SPEED VALUE = "3000 MHz"/> 
<ЕХЕСОТІОМ TECHNOLOGY VALUE = "4/4 cores; 8 threads"/> 
<MEMORY_TECHNOLOGY VALUE = "64-bit Capable"/> 
XINTERNAL L1 CACHE VALUE = "256 KB"/» 
XINTERNAL L2 CACHE VALUE - "1024 KB"/» 
XINTERNAL L3 CACHE VALUE = "10240 KB"/» 
</PROCESSOR> 
</PROCESSORS> 
<MEMORY> 


XADVANCED MEMORY PROTECTION» 


«AMP MODE STATUS VALUE - "Advanced ECC"/» 
<CONFIGURED АМР MODE VALUE 
«AVAILABLE AMP MODES VALUE - "Advanced ECC, 


</ADVANCED MEMORY PROTECTION» 
«MEMORY DETAILS SUMMARY» 


"Advanced ECC"/» 


Online Spare (Rank Sparing), Intrasocket Mirroring"/» 
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«CPU 1» 


«NUMBER OF SOCKETS VALUE = "12"/> 
«TOTAL MEMORY SIZE VALUE - "16 GB"/» 
<OPERATING FREQUENCY VALUE = "1866 MHz"/» 
<OPERATING VOLTAGE VALUE = "1.20 v"/» 
«/CPU 1» 
«CPU 2» 
«NUMBER OF SOCKETS VALUE = "12"/> 
«TOTAL MEMORY SIZE VALUE - "16 GB"/» 
<OPERATING FREQUENCY VALUE = "1866 MHz"/» 
<OPERATING VOLTAGE VALUE = "1.20 v"/» 
«/CPU 2» 


«/MEMORY DETAILS SUMMARY» 
«MEMORY DETAILS» 


«CPU 1» 
«SOCKET VALUE - "1"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE - "2"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE - "N/A"/» 
«SIZE VALUE - "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A" /> 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE - "3"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE - "N/A"/» 
«SIZE VALUE - "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A" /> 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE - "4"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
XMINIMUM VOLTAGE VALUE - "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE - "5"/» 
«STATUS VALUE - "Not Present"/» 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE - "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
XMINIMUM VOLTAGE VALUE - "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE - "6"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE - "N/A"/» 


Sample return for GET EMBEDDED HEALTH 211 


«FREQUENCY VALUE = "N/A"/» 


«MINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE = "7"/> 
«STATUS VALUE - "Not Present"/» 
«HP SMART MEMORY VALUE = "N/A" Type = "Unknown" /» 


«PART NUMBER - "N/A"/» 


«TYPE VALUE = "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
XMINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE - "8"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 


«PART NUMBER = "N/A"/» 


«TYPE VALUE - "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
<TECHNOLOGY VALUE = "N/A"/> 
</CPU_1> 
<CPU_1> 
<SOCKET VALUE = "9"/> 
<STATUS VALUE = "Good, In Use"/> 
<HP_SMART MEMORY VALUE = "Yes" Type = "Smart"/> 
<PART NUMBER = "762200-081"/» 
<TYPE VALUE = "DIMM DDR4"/> 
<SIZE VALUE = "8192 MB"/> 
<FREQUENCY VALUE = "2133 MHz"/» 
<MINIMUM VOLTAGE VALUE = "1.20 v"/> 
<RANKS VALUE = "2"/> 
<TECHNOLOGY VALUE = "RDIMM"/> 
</CPU_1> 
<CPU_1> 
<SOCKET VALUE = "10"/> 
<STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type = "Unknown"/» 


«PART NUMBER = "N/A"/» 


«TYPE VALUE = "N/A"/» 
«SIZE VALUE - "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A" /> 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 1» 
«CPU 1» 
«SOCKET VALUE - "11"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 


«PART NUMBER - "N/A"/» 


«TYPE VALUE - "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
<TECHNOLOGY VALUE = "N/A"/> 
</CPU_1> 
<CPU_1> 
<SOCKET VALUE = "12"/> 
<STATUS VALUE = "Good, In Use"/> 
<HP_SMART MEMORY VALUE = "Yes" Type = "Smart"/> 
<PART NUMBER = "762200-081"/> 
<TYPE VALUE = "DIMM DDR4"/> 
<SIZE VALUE = "8192 MB"/> 
<FREQUENCY VALUE = "2133 MHz"/> 
<MINIMUM VOLTAGE VALUE = "1.20 v"/> 
<RANKS VALUE = "2"/> 
<TECHNOLOGY VALUE = "RDIMM"/> 
</CPU_1> 
«CPU 2» 
«SOCKET VALUE = "1"/> 
«STATUS VALUE - "Not Present"/» 
«HP SMART MEMORY VALUE = "N/A" Type = "Unknown"/» 
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«PART NUMBER = "N/A"/» 


«TYPE VALUE = "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
XMINIMUM VOLTAGE VALUE - "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
| «SOCKET VALUE = "2"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE - "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
XMINIMUM VOLTAGE VALUE - "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "3"/» 
«STATUS VALUE = "Not Present"/> 
<НР SMART MEMORY VALUE - "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE - "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "4"/» 
«STATUS VALUE - "Not Present"/» 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE - "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
XMINIMUM VOLTAGE VALUE - "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "5"/» 
«STATUS VALUE - "Not Present"/» 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE = "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "6"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A" /> 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE = "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE = "7"/» 
«STATUS VALUE = "Not Present"/> 
<НР SMART MEMORY VALUE - "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/> 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A" /> 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
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«SOCKET VALUE - "8"/> 


«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER - "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
«MINIMUM VOLTAGE VALUE = "N/A"/» 
XRANKS VALUE - "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "9"/» 
«STATUS VALUE = "Good, In Use"/> 
«HP SMART MEMORY VALUE = "Yes" Type = "Smart"/» 
«PART NUMBER - "762200-081"/» 
«TYPE VALUE - "DIMM DDR4"/» 
«SIZE VALUE - "8192 MB"/» 
«FREQUENCY VALUE - "2133 MHz"/» 
«MINIMUM VOLTAGE VALUE = "1.20 v"/» 
<RANKS VALUE = "2"/» 
«TECHNOLOGY VALUE - "RDIMM"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "10"/» 
«STATUS VALUE = "Not Present"/> 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER = "N/A"/» 
«TYPE VALUE - "N/A"/» 
«SIZE VALUE = "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
<MINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "11"/» 
«STATUS VALUE - "Not Present"/» 
«HP SMART MEMORY VALUE = "N/A" Type - "Unknown"/» 
«PART NUMBER = "N/A"/» 
«TYPE VALUE = "N/A"/» 
«SIZE VALUE - "N/A"/» 
«FREQUENCY VALUE - "N/A"/» 
XMINIMUM VOLTAGE VALUE = "N/A"/» 
<RANKS VALUE = "N/A"/» 
«TECHNOLOGY VALUE - "N/A"/» 
«/CPU 2» 
«CPU 2» 
«SOCKET VALUE - "12"/» 
«STATUS VALUE = "Good, In Use"/» 
«HP SMART MEMORY VALUE = "Yes" Type = "Smart"/> 
<PART NUMBER = "762200-081"/> 
<TYPE VALUE = "DIMM DDR4"/> 
<SIZE VALUE = "8192 MB"/> 
<FREQUENCY VALUE = "2133 MHz"/> 
<MINIMUM VOLTAGE VALUE = "1.20 v"/» 
<RANKS VALUE = "2"/» 
«TECHNOLOGY VALUE - "RDIMM"/» 
«/CPU 2» 
«/MEMORY DETAILS» 
</MEMORY> 
<МІС ІМЕОКМАТТОМ> 
«iLO» 
<NETWORK PORT VALUE = "iLO Dedicated Network Port"/» 
«PORT DESCRIPTION VALUE - "iLO Dedicated Network Port"/» 
XLOCATION VALUE - "Embedded"/» 
<МАС ADDRESS VALUE - "38:63:bb:3a:27:10"/> 
<IP_ADDRESS VALUE = "15.154,127,140"7» 
«STATUS VALUE - "OK"/» 
</iLO> 
<NIC> 
<NETWORK PORT VALUE = "Port 1"/> 
<РОКТ DESCRIPTION VALUE - "HP Ethernet 1Gb 4-port 331i Adapter"/» 
«LOCATION VALUE = "Embedded"/> 
<MAC_ADDRESS VALUE = "38:63:bb:40:56:48"/> 
<IP_ADDRESS VALUE = "N/A"/> 
<STATUS VALUE = "Unknown"/> 
</NIC> 
<NIC> 
<NETWORK PORT VALUE = "Port 2n 
«PORT DESCRIPTION VALUE = "HP Ethernet 1Gb 4-port 331i Adapter"/» 
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«LOCATION VALUE = "Embedded"/» 
<МАС ADDRESS VALUE - "38:63:bb:40:56:49"/> 
<IP_ADDRESS VALUE = "N/A"/> 
<STATUS VALUE = "Unknown"/> 
</NIC> 
<NIC> 
<NETWORK_PORT VALUE = "Port 3" /> 
«PORT DESCRIPTION VALUE = "HP Ethernet 1Gb 4-port 331i Adapter"/> 
<LOCATION VALUE = "Embedded"/> 
<MAC_ADDRESS VALUE = "38:63:bb:40:56:4a"/> 
«IP ADDRESS VALUE = "N/A"/» 
«STATUS VALUE = "Unknown"/» 
</МІС> 
<МІС> 
XNETWORK PORT VALUE - "Port 4"/» 
«PORT DESCRIPTION VALUE = "HP Ethernet 1Gb 4-port 331i Adapter"/» 
XLOCATION VALUE - "Embedded"/» 
<МАС ADDRESS VALUE - "38:63:bb:40:56:4b"/> 
<IP_ADDRESS VALUE = "N/A"/> 
<STATUS VALUE = "Unknown"/> 
</NIC> 
<NIC> 
<NETWORK PORT VALUE = "Port 1"/5 
<РОКТ DESCRIPTION VALUE = "НР Ethernet 16р 4-port 366FLR Adapter #3"/> 
«LOCATION VALUE = "Embedded"/» 
<МАС ADDRESS VALUE - "8c:dc:d4:af:1c:ec"/» 
XIP ADDRESS VALUE - "15.154.127.139"/> 
«STATUS VALUE - "ОК"/> 
</МІС> 
<МІС> 
XNETWORK PORT VALUE - "Port gu 
<РОКТ DESCRIPTION VALUE - "HP Ethernet 1Gb 4-port 366FLR Adapter #3"/> 
«LOCATION VALUE = "Embedded"/» 
«MAC ADDRESS VALUE = "Bc:dc:d4:af:1c:ed"/» 
«IP ADDRESS VALUE - "N/A"/» 
«STATUS VALUE = "Unknown"/» 
</МІС> 
<МІС> 
XNETWORK PORT VALUE = "Port EE 
«PORT DESCRIPTION VALUE = "HP Ethernet 1Gb 4-port 366FLR Adapter #3"/> 
XLOCATION VALUE = "Embedded"/» 
<МАС ADDRESS VALUE - "8c:dc:d4:af:1c:ee"/» 
«IP ADDRESS VALUE = "N/A"/» 
«STATUS VALUE = "Unknown"/» 
«/NIC» 
«NIC» 
«NETWORK PORT VALUE - "Port 4"/» 
«PORT DESCRIPTION VALUE - "HP Ethernet 1Gb 4-port 366FLR Adapter #3"/> 
XLOCATION VALUE = "Embedded"/» 
<МАС ADDRESS VALUE - "B8c:dc:d4:af:lc:ef"/> 
<IP_ADDRESS VALUE = "N/A"/> 
<STATUS VALUE = "Unknown"/> 
</NIC> 
</NIC_INFORMATION> 
<STORAGE> 
<CONTROLLER> 
<LABEL VALUE = "Controller on System Board"/> 
<STATUS VALUE = "OK"/> 
<CONTROLLER_STATUS VALUE = "OK"/> 
<SERIAL NUMBER VALUE = "PDNLHOBRH8A25C"/» 
«MODEL VALUE = "Smart Array P440ar Controller"/> 
«FW VERSION VALUE = "3.52"/> 
<CACHE MODULE STATUS VALUE = "OK"/> 
<CACHE MODULE SERIAL NUM VALUE = "PDNLHOBRH8A25C"/» 
«CACHE MODULE MEMORY VALUE - "2097152 KB"/» 
«ENCRYPTION STATUS VALUE = "Not Enabled"/» 
«ENCRYPTION SELF TEST STATUS VALUE = "OK"/> 
XENCRYPTION CSP STATUS VALUE = "OK" /» 
«DRIVE ENCLOSURE» 
«LABEL VALUE = "Port 11 Box 3"/» 
«STATUS VALUE - "OK"/» 
«DRIVE BAY VALUE - "04"/» 
«/DRIVE ENCLOSURE» 
«DRIVE ENCLOSURE» 
«LABEL VALUE = "Port 21 Box 0"/> 
«STATUS VALUE - "ОК"/> 
«DRIVE BAY VALUE = "04"/> 
«/DRIVE ENCLOSURE» 
<ҺОСІСАҺ DRIVE» 
«LABEL VALUE = "01"/» 
«STATUS VALUE - "OK"/» 
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<CAPACITY VALUE = "231 GiB"/> 


<FAULT_ TOLERANCE VALUE = "RAID 0"/> 
<LOGICAL DRIVE TYPE VALUE = "Data LUN"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
<PHYSICAL_DRIVE> 
<LABEL VALUE = "Port 1I Box 3 Bay 2"/> 
<STATUS VALUE = "OK"/> 
<SERIAL_NUMBER VALUE = "9XF3EGT20000C5236EYR"/> 
«MODEL VALUE = "MM0500FBFVQ"/» 
<CAPACITY VALUE = "465 GiB"/> 
<MARKETING CAPACITY VALUE = "341 GB"/» 
<LOCATION VALUE = "Port 1I Box 3 Bay 2"/> 
<FW_VERSION VALUE = "HPD8"/> 
<DRIVE_CONFIGURATION VALUE = "Configured"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
<MEDIA_TYPE VALUE = "HDD"/> 


«/PHYSICAL DRIVE» 
«PHYSICAL DRIVE» 


«LABEL VALUE = "Port 11 Box 3 Bay 1"/> 
«STATUS VALUE - "ОК"/> 

«SERIAL NUMBER VALUE = "9XF3EJE30000C523FA8T"/> 
«MODEL VALUE = "MM0500FBFVQ"/» 

«CAPACITY VALUE = "465 GiB"/> 

<MARKETING CAPACITY VALUE = "341 GB"/» 
<LOCATION VALUE = "Port 1I Box 3 Bay 1"/> 
<FW_VERSION VALUE = "HPD8"/> 
<DRIVE_CONFIGURATION VALUE = "Configured"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
<MEDIA_TYPE VALUE = "HDD"/> 


«/PHYSICAL DRIVE» 
«/LOGICAL DRIVE» 
«LOGICAL DRIVE» 
«LABEL VALUE = "02"/> 
<STATUS VALUE = "OK"/> 
<CAPACITY VALUE = "231 GiB"/> 
<FAULT TOLERANCE VALUE = "RAID 0"/> 
<LOGICAL DRIVE TYPE VALUE = "Data LUN"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
<PHYSICAL_DRIVE> 


<LABEL VALUE = "Port 1I Box 3 Bay 2"/> 
<STATUS VALUE = "ОК"/> 

<SERIAL_NUMBER VALUE = "9XF3EGT20000C5236EYR"/> 
«MODEL VALUE = "MM0500FBFVQ"/» 

<CAPACITY VALUE = "465 GiB"/> 

«MARKETING CAPACITY VALUE = "341 GB"/» 
«LOCATION VALUE = "Port 1I Box 3 Bay 2"/> 
«FW VERSION VALUE = "HPD8"/> 
<DRIVE_CONFIGURATION VALUE = "Configured"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
<MEDIA_TYPE VALUE = "HDD"/> 


«/PHYSICAL DRIVE» 
«PHYSICAL DRIVE» 


«LABEL VALUE = "Port 11 Box 3 Bay 1"/> 
«STATUS VALUE - "ОК"/> 

«SERIAL NUMBER VALUE = "9XF3EJE30000C523FA8T"/> 
«MODEL VALUE = "MM0500FBFVQ"/» 

<CAPACITY VALUE = "465 GiB"/> 

«MARKETING CAPACITY VALUE = "341 GB^/» 
«LOCATION VALUE = "Port 1I Box 3 Вау 1"/» 
«FW VERSION VALUE = "HPD8"/> 
<DRIVE_CONFIGURATION VALUE = "Configured"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
<MEDIA_TYPE VALUE = "HDD"/> 


«/PHYSICAL DRIVE» 


«/LOGICAL DRIVE» 
XLOGICAL DRIVE» 


<LABEL VALUE = 
<STATUS VALUE = 


<CAPACITY VALUE = "231 GiB"/> 
<FAULT_TOLERANCE VALUE = "RAID 0"/> 
<LOGICAL DRIVE TYPE VALUE = "Data LUN"/» 
«ENCRYPTION STATUS VALUE = "Not Encrypted"/» 
«PHYSICAL DRIVE» 
«LABEL VALUE = "Port 11 Box 3 Bay 2"/> 
«STATUS VALUE - "ОК"/> 
«SERIAL NUMBER VALUE = "9XF3EGT20000C5236EYR"/> 
«MODEL VALUE - "MM0500FBFVQ"/» 
«CAPACITY VALUE = "465 GiB"/> 
«MARKETING CAPACITY VALUE = "341 GB"/» 
«LOCATION VALUE = "Port 1I Box 3 Bay 2"/> 
«FW VERSION VALUE = "HPD8"/» 
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«DRIVE CONFIGURATION VALUE - "Configured"/» 
«ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
«MEDIA TYPE VALUE = "HDD"/» 


«/PHYSICAL DRIVE» 
«PHYSICAL DRIVE» 


«LABEL VALUE = "Port 11 Box 3 Bay 1"/> 
«STATUS VALUE - "ОК"/> 

«SERIAL NUMBER VALUE = "9XF3EJE30000C523FA8T"/> 
«MODEL VALUE = "MM0500FBFVQ"/» 

«CAPACITY VALUE = "465 GiB"/» 

«MARKETING CAPACITY VALUE = "341 GB"/» 
<LOCATION VALUE = "Port 1I Box 3 Bay 1"/» 
«FW VERSION VALUE = "HPD8"/> 

«DRIVE CONFIGURATION VALUE = "Configured"/» 
«ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
«MEDIA TYPE VALUE - "HDD"/» 


«/PHYSICAL DRIVE» 

«/LOGICAL DRIVE» 

«LOGICAL DRIVE» 

«LABEL VALUE = "04"/» 

«STATUS VALUE - "OK"/» 

«CAPACITY VALUE - "231 GiB"/» 

<FAULT TOLERANCE VALUE = "RAID 0"/> 

<LOGICAL DRIVE ТҮРЕ VALUE = "Data LUN"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted"/> 
<PHYSICAL_ DRIVE> 


<LABEL VALUE = "Port 1I Box 3 Bay 2"/> 
<STATUS VALUE = "ОК"/> 

«SERIAL NUMBER VALUE = "9XF3EGT20000C5236EYR"/> 
«MODEL VALUE = "MM0500FBFVQ"/» 

<CAPACITY VALUE = "465 GiB"/> 

«MARKETING CAPACITY VALUE = “341 GB”/> 
<LOCATION VALUE = "Port 1I Box 3 Bay 2"/> 
<FW_VERSION VALUE = "HPD8"/> 
<DRIVE_CONFIGURATION VALUE = "Configured"/> 
<ENCRYPTION STATUS VALUE = "Not Encrypted" /> 
<MEDIA TYPE VALUE = "HDD"/> 


«/PHYSICAL DRIVE» 
«PHYSICAL DRIVE» 


<LABEL VALUE = "Port 11 Box 3 Bay 1"/> 
«STATUS VALUE = "OK"/> 
«SERIAL NUMBER VALUE = "9XF3EJE30000C523FA8T"/> 
«MODEL VALUE = "MM0500FBFVQ"/» 
«CAPACITY VALUE = "465 GiB"/> 
«MARKETING CAPACITY VALUE = "341 GB"/» 
«LOCATION VALUE = "Port 11 Box 3 Bay 1"/» 
«FW VERSION VALUE - "HPD8"/» 
«DRIVE CONFIGURATION VALUE - "Configured"/» 
«ENCRYPTION STATUS VALUE = "Not Encrypted"/» 
«MEDIA TYPE VALUE - "HDD"/» 
«/PHYSICAL DRIVE» 
«/LOGICAL DRIVE» 
</CONTROLLER> 
<DISCOVERY_STATUS> 
<STATUS VALUE = "Discovery Complete"/> 
</DISCOVERY_STATUS> 
</STORAGE> 
«FIRMWARE INFORMATION» 
«INDEX 1» 
«FIRMWARE NAME VALUE = "iLO"/» 
«FIRMWARE VERSION VALUE = "2.40 pass 30 Dec 02 2015"/> 
«/INDEX 1» 
«INDEX 2» 
«FIRMWARE NAME VALUE = "System ROM"/> 
«FIRMWARE VERSION VALUE - "P89 v2.00 (10/10/2015)"/» 
«/INDEX 2» 
«INDEX 3» 
«FIRMWARE NAME VALUE = "Redundant System ROM"/> 
«FIRMWARE VERSION VALUE = "P89 v2.00 (07/09/2015) "/> 
</INDEX_3> 
<INDEX_4> 
<FIRMWARE NAME VALUE = "Intelligent Provisioning"/> 
<FIRMWARE VERSION VALUE = "2.01.29"/> 
</INDEX_4> 
<INDEX_5> 
<FIRMWARE NAME VALUE = "Intelligent Platform Abstraction Data"/> 
<FIRMWARE VERSION VALUE = "20.1"/> 
</INDEX_5> 
<INDEX_6> 
<FIRMWARE_NAME VALUE = "Power Management Controller Firmware"/> 
<FIRMWARE VERSION VALUE = "1.0.9"/> 
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«/INDEX 6» 

«INDEX 7» 
«FIRMWARE NAME 
«FIRMWARE VERS 

«/INDEX 7» 

«INDEX 8» 
«FIRMWARE NAME 
«FIRMWARE VERS 

«/INDEX 8» 

«INDEX 9» 


«FIRMWARE NAME 
«FIRMWARE VERS 
«/INDEX 9» 
«INDEX 10» 
«FIRMWARE МАМЕ 
«FIRMWARE VERS 
«/INDEX 10» 
«INDEX 11» 
«FIRMWARE МАМЕ 
«FIRMWARE VERS 
«/INDEX 11» 
«INDEX 12» 
«FIRMWARE МАМЕ 
«FIRMWARE VERS 
«/INDEX 12» 
«INDEX 13» 
«FIRMWARE МАМЕ 
«FIRMWARE VERS 
«/INDEX 13» 
«INDEX 14» 
«FIRMWARE NAME 
«FIRMWARE VERS 
«/INDEX 14» 
«INDEX 15» 
«FIRMWARE NAME 
«FIRMWARE VERS 
«/INDEX 15» 
«/FIRMWARE INFORMATION» 
<HEALTH AT A GLANCE» 

«BIOS HARDWARE STATU 

«FANS STATUS- "ОК"/> 
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«FIRMWARE FAMILY VALUE = "14h"/> 


- "Power Management Controller FW Bootloader"/» 
LUE = "1.0"/> 


= "System Programmable Logic Device"/> 


LUE = "Version 0x33"/> 

= "SAS Programmable Logic Device"/> 

LUE = "Version 0x01"/> 

= "Server Platform Services (SPS) Firmware"/> 
LUE = "3.0.6.267.1"/> 


= "HPE Smart Storage Battery 1 Firmware"/> 
LUE = "1.1"/> 


= "TPM Firmware"/> 


LUE = "3.17"/» 
= "Smart Array P440ar Controller"/> 
LUE = "3.52"/> 


= "HP Ethernet 1Gb 4-port 331i Adapter"/> 
LUE = "1.38.0"/» 


= "HP Ethernet 1Gb 4-port 366FLR Adapter #3"/> 
LUE = "1.1200.0"/» 


"/> 


«FANS REDUNDANCY- "Redundant"/» 

"ок"/> 

«POWER SUPPLIES STATUS- "ОК"/> 

«POWER SUPPLIES REDUNDANCY- "Not Redundant"/» 
«BATTERY STATUS- "OK"/> 
«PROCESSOR STATUS- "OK"/» 


«TEMPERATURE STATUS- 


«MEMORY STATUS- "OK" 


/> 


«NETWORK STATUS- "ОК"/> 
«STORAGE STATUS- "OK"/» 


</HEALTH AT A GLANCE» 
«/GET EMBEDDED HEALTH DATA» 
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Examples for remapping drive bays in Apollo 2000 
systems 


With the iLO administrator login credentials, an authorized administrator may execute iLO XML commands to view or 
update the association between HPE Apollo r2800 Chassis server slots/nodes and the drive bays. 


The administrator must understand the possible data destructive results that can happen when drive bays are remapped 
in an existing system. Only administrators with the correct iLO Administrator login credentials will be allowed to change 
the drive bay mapping. 


For the new drive bay mapping to become effective, all server nodes in the Apollo r2800 chassis must be powered down. 
At this point, the chassis firmware reconfigures the storage expander backplane and when the servers are powered back 
on, the new drive bay mapping will be in place. All servers must remain powered off for at least 5 seconds after the iLO 
XML commands to reconfigure the drive bay mapping are successfully executed. 


Ө! IMPORTANT: The drive bay mapping (zone table) is maintained іп NVRAM on the Apollo r2800 power distribution 
board. If that board is replaced, the drive bay mapping must be setup again for the existing nodes in exactly the 
same way. The system administrator must record the drive bay configuration before replacing the power 
distribution board. 


NOTE: For specific syntax information related to drive bay mapping commands, see HARD DRIVE ZONE. 


Example 1 


In this example, a Apollo r2800 Chassis has four XL170r server nodes. The system administrator was to map the drive 
bays as follows: 


e Drive bays 1 and 2 to XL170r node 1 
e Drive bays 5 through 6 їо XL170r node 2 
e Drive bays 7 through 22 to XL170r node 3 


e Drive bays 23 апа 24 to XL170r node 4 
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Read backplane information 


Using a script that includes the READ BACKPLANE INFO command, get the current mapping information from the Apollo 
r2800 Chassis. 


Using the READ BACKPLANE INFO command 


<!-- Script to read hard drive backplane info so user сап --> 
<!-- determine node to host port mapping, number of bays, --> 
<!-- start and end bay number for setting up a zone table. --> 
<RIBCL VERSION="2.23"> 


«LOGIN USER LOGIN-"admin" PASSWORD="password"> 
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«HARD DRIVE ZONE MODE="read"> 
«READ BACKPLANE INFO/» 
«/HARD DRIVE ZONE» 
«/ LOGIN» 
</RIBCL> 


Sample script return 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
<RESPONSE 
STATUS="0x0000" 
MESSAGE='No error' 
/> 
<READ BACKPLANE ІМЕО> 
«TYPE ID>"1"</TYPE ID» 
«SEP NODE ID>"4"</SEP NODE ID» 
<WWID>"50014380318db27£"</WWID> 
<SEP_ID>"0000"</SEP_ID> 
<BACKPLANE NAME>"HP Apollo 2000 "</BACKPLAN 
FW REV2"0.20"«/FW REV» 
BAY СМТ>"24"</ВАҮ CNT» 
START ВАҮ>"1"</5ТАКТ ВАҮ> 
END ВАҮ>"24"</ЕМр ВАҮ> 
HOST PORT CNT2"4"«/HOST PORT СМТ> 
HOST PORT value="1"> 
«NODE NUM»"1"«/NODE 
«SLOT NUM>"1"</SLOT 


т 


| NAME» 


N 
NUM> 
alue="2"> 
<NODE МОМ>"2"</МОрЕ NUM» 
«SLOT МОМ>"1"</5Һ0Т NUM» 
«/HOST PORT» 
M 


«HOST PORT value="3"> 
«NODE NUM»"3"«/NODE NUM» 
«SLOT NUM»"1"«/SLOT NUM» 

«/HOST PORT» 

v 


<HOST_PORT value="4"> 
«NODE NUM>"4"</NODE NUM> 
«SLOT МОМ>"1"</5Һ0Т NUM» 
«/HOST PORT» 
«/READ BACKPLANE INFO» 
</RIBCL> 


Build a script 


Use the backplane information to build a script to remap the bays to the nodes as required. 


® IMPORTANT: The administrator must understand the possible results, including data destruction, that can happen 
when drive bays are remapped in an existing system. Only administrators with the correct iLO Administrator login 
credentials are allowed to change drive bay mapping. 


For new drive bay mapping to become effective, all server nodes in the chassis must be powered down. When 
powered down, the chassis firmware reconfigures the storage expander backplane. When the servers are powered 
back on, the new drive bay mapping becomes active. 
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Sample remapping script 


<!-- The following script maps the hard drive bays to the nodes --» 
<!-- as follows. Use the Read Backplane Info command to determine --> 
<!-- Node to Host Port mapping --> 
<1-- --> 
<!-- Node 1 on Host port 1 --» 
<!-- Drive Bays 1,2 --> 
<!-- Node 2 on Host port 2 --> 
<!-- Drive Bays 3-6 EE 
<!-- Node 3 on Host port 3 ==> 
<!-- Drive Bays 7-22 --> 
<!-- Node 4 on Host port 4 --> 
<l== Drive Bays 23,24 --> 
<1-- --> 
<RIBCL VERSION-"2.23"» 
«LOGIN USER LOGIN-"admin" PASSWORD-"password"» 
<HARD DRIVE ZONE MODE="write"> 
<WRITE ZONE TABLE> 
<TYPE ID value="1"/> 
«SEP NODE ID value="0"/> 
<HOST PORT value="1"/> 
<BAY value="1"/> 
<BAY value="2"/> 
<HOST PORT value="2"/> 
<BAY value="3"/> 
<BAY value="4"/> 
<BAY value="5"/> 
<BAY value="6"/> 
<HOST PORT value="3"/> 
<BAY value="7"/> 
<BAY value="8"/> 
<BAY value="9"/> 
<BAY value="10"/> 
<BAY value="11"/> 
<BAY value="12"/> 
<BAY value="13"/> 
<BAY value="14"/> 
<BAY value="15"/> 
<BAY value="16"/> 
<BAY value="17"/> 
<BAY value="18"/> 
<BAY value="19"/> 
<BAY value="20"/> 
<BAY value="21"/> 
<BAY value="22"/> 
<HOST PORT value="4"/> 
<BAY value="23"/> 
<BAY value="24"/> 
</WRITE ZONE TABLE» 
«/HARD DRIVE ZONE» 
</LOGIN> 
</RIBCL> 
Verify the zone table 


Using a script that includes the READ_ZONE_TABLE command, verify the changes to the zone table. 
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Sample verification script 


<!-- Script to read current zone table --> 


<RIBCL VERSION-"2.23"» 
«LOGIN USER LOGIN-"admin" PASSWORD="password"> 
<HARD DRIVE ZONE MODE="read"> 
«READ ZONE TABLE/» 
</HARD DRIVE ZONE» 
</LOGIN> 
</RIBCL> 


Sample verification script return 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 
> 
«READ ZONE TABLE» 
«TYPE ID value="1"/> 
«SEP NODE ID value="0"/> 
«HOST PORT value="1"/> 
<BAY value-"1"/» 
<BAY value-"2"/» 
«HOST PORT value="2"/> 
<BAY value-"3"/» 
<BAY value="4"/> 
<BAY value="5"/> 
<BAY value="6"/> 
<HOST_PORT value="3"/> 
<BAY value="7"/> 
<BAY value="8"/> 
<BAY value="9"/> 
<BAY value="10"/> 
<BAY value="11"/> 
<BAY value="12"/> 
<BAY value="13"/> 
<BAY value="14"/> 
<BAY value="15"/> 
<BAY value="16"/> 
<BAY value="17"/> 
<BAY value="18"/> 
<BAY value="19"/> 
<BAY value="20"/> 
<BAY value="21"/> 
<BAY value="22"/> 
<HOST_PORT value="4"/> 
<BAY value="23"/> 
<BAY value="24"/> 
</READ_ZONE_TABLE> 
</RIBCL> 
<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 


I 
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/> 
</RIBCL> 


Example 2 


A Apollo r2800 Chassis containing two XL170r nodes installed in server slots 1 and 3. The System Administrator wants to 
map the drives bays as follows: 


e Drive bays 1 through 10 to XL170r node 1. 
e Drive bays 11 through 22 to the XL170r node 3. 


e The Administrator purposefully leaves drive bays 23 and 24 unmapped. The Administrator understands that if drives 
are plugged into those drive bays, servers cannot access those drive bays until they are remapped (using iLO CLI 


commands or scripts ) to a specific server node. 
4| + 
bd hd 
| 
| Node 4 


Enter the READ BACKPLANE INFO command to review and record the current drive bay mapping information. See the 
previous example for more information. 


OIOIOIO 


ОООО 
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ШІ 0000860000000000 
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Build the script 


Use the backplane information to build a script to remap the bays to the nodes as required. 


Ө! IMPORTANT: The administrator must understand the possible results, including data destruction, that can happen 
when drive bays are remapped in an existing system. Only administrators with the correct iLO Administrator login 
credentials are allowed to change drive bay mapping. 


For new drive bay mapping to become effective, all server nodes in the chassis must be powered down. When 
powered down, the chassis firmware reconfigures the storage expander backplane. When the servers are powered 
back on, the new drive bay mapping becomes active. 


Sample remapping script 2 


<!-- The following script maps the hard drive bays to the nodes --> 
<!-- as follows. Use the Read Backplane Info command to determine --> 
<1-- Node to Host Port mapping --> 
«!--Node 1 on Host port 1 --» 
<!-- Drive Bays 1-10 --> 
«!--Node 2 on Host port 2 --> 
«!-- No Drive Bays assigned --> 
<!--Node 3 on Host port SU 
<!-- Drive Bays 11-22 --> 
«!--Node 4 on Host port 4 --> 
<!-- No Drive Bays assigned --> 
<!-- UNASSIGNED --> 
hae Drive Bays 23,24 --> 


<RIBCL VERSION-"2.23"» 
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«LOGIN USER LOGIN-"admin" PASSWORD-"password"» 
«HARD DRIVE ZONE MODE="write"> 


< 


«WRITE ZONE TABLE» 
«TYPE ID value="1"/> 
«SEP NODE ID value="0"/> 
«HOST PORT value="1"/> 
<ВАҮ value="1"/> 
<ВАҮ value="2"/> 
<ВАҮ value="3"/> 
<ВАҮ value="4"/> 
<ВАҮ value="5"/> 
<ВАҮ value="6"/> 
<ВАҮ value="7"/> 
<ВАҮ value="8"/> 
<ВАҮ value="9"/> 
<BAY value-"10"/» 
«HOST PORT value-"3"/» 
<ВАҮ value="11"/> 
<ВАҮ value="12"/> 
<BAY value-"13"/» 
<ВАҮ value="14"/> 
<BAY value="15"/> 
<BAY value="16"/> 
<BAY value="17"/> 
<BAY value="18"/> 
<BAY value="19"/> 
<BAY value="20"/> 
<BAY value="21"/> 
<BAY value="22"/> 
«HOST PORT value-"UNASSIGNED"/» 
<BAY value-"23"/» 
<ВАҮ value="24"/> 
/WRITE ZONE TABLE» 


«/HARD DRIVE ZONE» 


«/LOG 
</RIBCL> 


IN> 


Verify the zone table 


Using a scrip 


t that includes the READ_ZONE_TABLE command, verify the changes to the zone table. 


Sample verification script 2 


Slee 


Script to read current zone table --> 


<RIBCL УЕК5ІОМ-"2.23"> 


«LOGIN 


USER LOGIN-"admin" PASSWORD="password"> 


«HARD DRIVE ZONE MODE="read"> 


«READ ZONE TABLE/» 


«/HARD DRIVE ZONE» 
</LOGIN> 


</RIBCL> 


Sample verification script return 2 


<?xml version="1.0"?> 


<RIBCL V 


ERSION="2.23"> 


<RESPONSE 


Б 
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STATUS-"0x0000" 
MESSAGE='No error' 
I> 
«READ ZONE TABLE» 
«TYPE ID value="1"/> 
«SEP NODE ID value="0"/> 
«HOST PORT value="1"/> 
<BAY value-"1"/» 
<BAY value-"2"/» 
<BAY value-"3"/» 
<BAY value="4"/> 
<BAY value="5"/> 
<BAY value="6"/> 
<BAY value="7"/> 
<BAY value="8"/> 
<BAY value="9"/> 
<BAY value="10"/> 
<HOST_PORT value="3"/> 
<BAY value="11"/> 
<BAY value="12"/> 
<BAY value="13"/> 
<BAY value="14"/> 
<BAY value="15"/> 
<BAY value="16"/> 
<BAY value="17"/> 
<BAY value="18"/> 
<BAY value="19"/> 
<BAY value="20"/> 
<BAY value="21"/> 
<BAY value="22"/> 
<HOST PORT value="UNASSIGNED"/> 
<BAY value="23"/> 
<BAY value="24"/> 
</READ_ZONE_TABLE> 
</RIBCL> 
<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS-"0x0000" 
MESSAGE='No error' 
/> 
«/RIBCL» 


T 


Error messages 


Hewlett Packard Enterprise strongly recommends that you use the READ BACKPLANE INFO command before 
attempting to modify the drive bay mapping in any system. Read and record the output from the command so that you 
can return to the original mapping if needed, and know the maximum values for all settings. The examples that follow 
show invalid scripts and the resulting error codes. Note the shaded values in the invalid scripts. 


Invalid script 1: Incorrect port map 


«es The following script maps the drive bays to the server nodes -> 
<1-- but has an error trying to use an invalid out of range port. ==> 


<RIBCL VERSION="2.23"> 
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«LOGIN USER LOGIN-"admin" PASSWORD="password"> 
<HARD DRIVE ZONE MODE="write"> 
<WRITE ZONE TABLE> 
«TYPE ID value="1"/> 

«SEP NODE ID value="0"/> 
«HOST PORT value-"5"/» 
<BAY value="1"/> 
«/WRITE ZONE TABLE» 
«/HARD DRIVE ZONE» 
«/LOGIN» 
</RIBCL> 


T 


Error response to invalid script 1 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
<RESPONSE 
STATUS="0x00EA" 
MESSAGE='Hard Drive Zone invalid port.' 
/> 
</RIBCL> 


Invalid script 2: Incorrect bay selection 


<!-- The following script maps the drive bays to the server nodes ==> 
<1=- but has an invalid drive bay number 25 --> 


<RIBCL VERSION-"2.23"» 
«LOGIN USER LOGIN-"admin" PASSWORD="password"> 
<HARD DRIVE ZONE MODE="write"> 
«WRITE ZONE TABLE> 
«TYPE ID value="1"/> 


«SEP NODE ID value="0"/> 
«HOST PORT value-"1"/» 
<BAY value-"1"/» 
<BAY value="25"/> 
</WRITE_ZONE_TABLE> 
«/HARD DRIVE ZONE» 
«/LOGIN» 
«/RIBCL» 


Error response to invalid script 2 


<?xml version="1.0"?> 
<RIBCL VERSION-"2.23"» 
«RESPONSE 
STATUS="0x00EA" 
MESSAGE='Hard Drive Zone invalid bay.' 
/> 
</RIBCL> 


Ensure that each drive bay is assigned only once. In the example below, Drive Bay 10 is incorrectly mapped to two nodes. 


Invalid script 3: One drive bay assigned to two nodes 


<!-- The following invalid script maps the hard drive bays to the nodes --> 
<!-- as follows but assigns Drive Bay 10 to two nodes. --> 
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<!-- Node to Host Port mapping --> 


«!--Node 1 on Host port 1 --> 

<!-- Drive Bays 1-10 --> 
«!--Node 2 on Host port 2 ==> 

<!-- No Drive Bays assigned --> 
«!--Node 3 on Host port 3 ==> 

<!-- Drive Bays 10-22 --> 
«!--Node 4 оп Host port 4 ==> 

<!-- No Drive Bays assigned --> 

<!-- UNASSIGNED GA 
See Drive Bays 23,24 ue 


<RIBCL VERSION="2.23"> 
<LOGIN USER LOGIN-"admin" PASSWORD="password"> 
XHARD DRIVE ZONE MODE="write"> 
<WRITE ZONE TABLE> 
<TYPE_ID value="1"/> 
«SEP NODE ID value="0"/> 
<HOST_PORT value="1"/> 
<BAY value="1"/> 
<BAY value="2"/> 
<BAY value="3"/> 
<BAY value="4"/> 
<BAY value="5"/> 
<BAY value="6"/> 
<BAY value="7"/> 
<BAY value="8"/> 
<BAY value="9"/> 
<BAY value="10"/> 
<HOST_PORT value="3"/> 
<BAY value="10"/> 
<BAY value="11"/> 
<BAY value="12"/> 
<BAY value="13"/> 
<BAY value="14"/> 
<BAY value="15"/> 
<BAY value="16"/> 
<BAY value="17"/> 
<BAY value="18"/> 
<BAY value="19"/> 
<BAY value="20"/> 
<BAY value="21"/> 
<BAY value="22"/> 
<HOST PORT value="UNASSIGNED"/> 
<BAY value="23"/> 
<BAY value="24"/> 


[Es 


«/WRITE ZONE TABLE» 
«/HARD DRIVE ZONE» 
«/ LOGIN» 
«/RIBCL» 


Error response to invalid script 3 


<?xml version="1.0"?> 
<RIBCL VERSION="2.23"> 
«RESPONSE 
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STATUS="0x00EA" 
MESSAGE='Hard Drive Zone ???.' 
/> 
</RIBCL> 


Frequently asked questions 


Q: Will | lose drive data if | execute the WRITE TABLE or ZONE FACTORY DEFAULTS commands on a Apollo r2800 
Chassis that contains drives which already contain data? 


A: Yes. Note that the new drive bay mapping (zone table) only takes effect after all server nodes in the chassis are 
powered off and then restarted. These commands are only supported when run from a remote console with administrator 
login credentials. 


Q: | ran the XML script to write a new zone table. Why hasn't the new drive bay mapping taken affect? 


A: An new configuration that maps different drive bays to server node host ports only takes affect after all the server 
nodes in the chassis have been powered down for at least 5 seconds (at the same time). When a server node is restarted 
the new drive bay mapping becomes effective. 


Q: If power to the system is interrupted while the administrator is attempting to run the iLO XML commands or script to 
modify the drive bay mapping, what happens? 


A: The administrator should verify the current drive mapping configuration with the READ ZONE TABLE XML command 
and determine if the drive bay mapping is as expected. If it is not correct, the administrator must reapply the iLO XML 
commands or script and keep all server nodes powered off for at least 5 seconds. 
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Support апа other resources 


Accessing Hewlett Packard Enterprise Support 


e For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: 


https://www.hpe.com/info/assistance 


e То access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: 


https://www.hpe.com/support/hpesc 


Information to collect 

e Technical support registration number Cif applicable) 
e Product name, model or version, and serial number 

e Operating system name and version 

e Firmware version 

e Error messages 

e Product-specific reports and logs 

e Add-on products or components 


e Third-party products or components 


Accessing updates 


• Some software products provide a mechanism for accessing software updates through the product interface. Review 
your product documentation to identify the recommended software update method. 


e To download product updates: 


Hewlett Packard Enterprise Support Center 
https://www.hpe.com/support/hpesc 

Hewlett Packard Enterprise Support Center: Software downloads 
https://www.hpe.com/support/downloads 

My HPE Software Center 


https://www.hpe.com/software/hpesoftwarecenter 


• То subscribe to eNewsletters and alerts: 


https://www.hpe.com/support/e-updates 


e To view and update your entitlements, and to link your contracts and warranties with your profile, go to the Hewlett 
Packard Enterprise Support Center More Information on Access to Support Materials page: 


https://www.hpe.com/support/AccessToSupportMaterials 
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IMPORTANT: Access to some updates might require product entitlement when accessed through the Hewlett 
Packard Enterprise Support Center. You must have an HPE Passport set up with relevant entitlements. 


Remote support 


Remote support is available with supported devices as part of your warranty or contractual support agreement. It 
provides intelligent event diagnosis, and automatic, secure submission of hardware event notifications to Hewlett Packard 
Enterprise, which initiates a fast and accurate resolution based on the service level of your product. Hewlett Packard 
Enterprise strongly recommends that you register your device for remote support. 


If your product includes additional remote support details, use search to locate that information. 


HPE Get Connected 
https://www.hpe.com/services/getconnected 
HPE Pointnext Tech Care 


https://www.hpe.com/services/techcare 
HPE Datacenter Care 


https://www.hpe.com/services/datacentercare 


Warranty information 


To view the warranty information for your product, see the links provided below: 


HPE ProLiant and ІА-32 Servers and Options 


https://www.hpe.com/support/ProLiantServers-Warranties 


HPE Enterprise and Cloudline Servers 
https://www.hpe.com/support/EnterpriseServers-Warranties 
HPE Storage Products 


https://www.hpe.com/support/Storage-Warranties 
HPE Networking Products 


https://www.hpe.com/support/Networking-Warranties 


Regulatory information 


To view the regulatory information for your product, view the Safety and Compliance Information for Server, Storage, 
Power, Networking, and Rack Products, available at the Hewlett Packard Enterprise Support Center: 


https://www.hpe.com/support/Safety-Compliance-EnterpriseProducts 


Additional regulatory information 


Hewlett Packard Enterprise is committed to providing our customers with information about the chemical substances in 
our products as needed to comply with legal requirements such as REACH (Regulation EC No 1907/2006 of the European 
Parliament and the Council). A chemical information report for this product can be found at: 


https://www.hpe.com/info/reach 


For Hewlett Packard Enterprise product environmental and safety information and compliance data, including RoHS and 
REACH, see: 


https://www.hpe.com/info/ecodata 


For Hewlett Packard Enterprise environmental information, including company programs, product recycling, and energy 
efficiency, see: 
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https://www.hpe.com/info/environment 


Documentation feedback 


Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the 
documentation, use the Feedback button and icons (located at the bottom of an opened document) on the Hewlett 
Packard Enterprise Support Center portal (https://www.hpe.com/support/hpesc) to send any errors, suggestions, or 
comments. All document information is captured by the process. 
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